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Foreword 

This Technical Specification (TS) has been produced by the 3^'' Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change 
following formal TSG approval. Should the TSG modify the contents of the present document, it 
will be re-released by the TSG with an identifying change of release date and an increase in 
version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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1 Scope 

The present document specifies a profile of AT commands and recommends that this profile be used for controlling 
Mobile Termination (MT) functions and GSM/UMTS network services from a Terminal Equipment (TE) through 
Terminal Adaptor (TA). The command prefix +C is reserved for Digital Cellular in 

ITU-T Recommendation V.250 [14]. The present document has also the syntax details used to construct these extended 
GSM/UMTS commands. Commands from ITU-T Recommendation V.250 [14] and existing digital cellular standards 
(TIA IS-99 [15] and TIA IS-135 [16]) are used whenever applicable. Some of the new commands are defined such way 
that they can be easily applied to MT of networks other than GSM/UMTS. ITU-T Recommendation T.31 [11] and ITU- 
T Recommendation T.32 [12] fax AT commands may be used for GSM/UMTS fax transmission from TE. GSM/UMTS 
Short Message Service AT commands are defined in 3GPP TS 27.005 [24]. AT commands for GPRS and EPC are 
defined in clause 10 of this specification. The present document assumes an abstract architecture comprising a TE (e.g. 
a computer) and a MT interfaced by a TA (see figure 1). The span of control of the defined commands should allow 
handling of any physical implementation that this abstract architecture may lead to: 

TA, MT and TE as three separate entities; 

- TA integrated under the MT cover, and the TE implemented as a separate entity; 

- TA integrated imder the TE cover, and the MT implemented as a separate entity; and 

- TA and MT integrated under the TE cover as a single entity. 

The conomands described in the present document may be observed on the link between the TE and the TA. However, 
most of the commands retrieve information about the MT, not about the TA. 



TE 



responses 



AT cmds 



TA 



MT status 



MT control 



MT 



network messages 



USER & APPLICATIONS NETWORK 

Figure 1 : Setup 

Interface between TE and TA is intended to operate over existing serial (ITU-T Recommendation V.24) cables, infrared 
link, and all link types with similar behaviour. For correct operation many of the defined commands require eight bit 
data and therefore it is recommended that TE-TA link is set to eight bits/ byte mode. (For infrared operation 
implementation, refer informative references IrDA. For embedding AT commands and data during on-line data state, 
refer TIA-617/ITU-T V.80.) Interface between TA and MT is dependent on the interface in the MT. 

The functional blocks shown in figure 1, using AT commands, shall follow the principles described in the interactions 
handUng framework 3GPP TS 23.227 [63]. 
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2 References 

The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication, edition number, version number, etc.) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including 
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same 
Release as the present document. 



[I] 3GPP TS 22.002: "Bearer Services (BS) supported by a GSM PubUc Land Mobile Network 
(PLMN)". 

[2] 3GPP TS 22.003: "Teleservices supported by a GSM Pubhc Land Mobile Network (PLMN)". 

[3] 3GPP TS 22.08 1 : "Line identification supplementary services - Stage 1 " . 

[4] 3GPP TS 22.082: "Call Forwarding (CF) supplementary services - Stage 1 " . 

[5] 3GPP TS 22.083: "Call Waiting (CW) and Call Hold (HOLD) supplementary services - Stage 1". 

[6] 3GPP TS 22.088: "Call Barring (CB) supplementary services - Stage 1". 

[7] 3GPP TS 23.003: "Numbering, addressing and identification". 

[8] 3GPP TS 24.008: "Mobile Radio Interface Layer 3 specification; Core Network Protocols- 

Stage 3". 

[9] GSM MoU SE. 1 3 , GSM MoU Permanent Reference Document SE. 1 3 : " GSM Mobile Network 

Codes and Names". 

[10] ITU-T Recommendation E.212: "Identification plan for land mobile stations". 

[II] ITU-T Recommendation T.3 1 : "Asynchronous facsimile DCE control, service class 1 " . 

[12] ITU-T Recommendation T.32: "Asynchronous facsimile DCE control, service class 2". 

[13] ITU-T Recommendation T.50: "International Reference Alphabet (IRA) (Formerly International 

Alphabet No. 5 or IA5) - Information technology - 7-bit coded character set for information 
exchange". 

[14] ITU-T Recommendation V.250: "Serial asynchronous automatic dialUng and control". 

[15] TIA IS-99: "Data Services Option Standard for Wideband Spread Spectrum Digital Cellular 

System". 

[16] TIA IS-135: "800 MHz Cellular Systems, TDMA Services, Async Data and Fax". 

[17] PCCA STD-101 Data Transmission Systems and Equipment: "Serial Asynchronous Automatic 

Dialling and Control for Character Mode DCE on Wireless Data Services". 

[18] 3GPP TS 24.022: "Radio Link Protocol (RLP) for data and telematic services on the Mobile 

Station - Base Station System (MS - BSS) interface and the Base Station System - Mobile-services 
Switching Centre (BSS - MSC) interface". 

[19] 3GPP TS 22.030: "Man Machine Interface (MMI) of the Mobile Station (MS)" . 

|20] 3GPP TS 45.008: "Radio subsystem Unk control". 

|21J 3GPP TS 22.085: "Closed User Group (CUG) supplementary services - Stage 1". 

[22] 3GPP TS 22.084: "MultiParty (MPTY) supplementary services - Stage 1 " . 
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[23] 3GPP TS 22.090: "Unstructured Supplementary Service Data (USSD) - Stage 1". 

[24] 3GPP TS 27.005: "Use of Data Terminal Equipment - Data Circuit terminating Equipment (DTE - 

DCE) interface for Short Message Service (SMS) and Cell Broadcast Service (CBS)". 

[25] 3GPP TS 23.038: "Alphabet and language specific information". 

[26] 3GPP TS 22.024: "Description of Charge Advice Information (CAI)" . 

[27] 3GPP TS 22.086: "Advice of Charge (AoC) supplementary services - Stage 1". 

[28] 3GPP TS 5 1 .011 : "Specification of the Subscriber Identity Module - Mobile Equipment (SIM-ME) 

interface". 

[29] 3GPP TS 22.034: "High Speed Circuit Switched Data (HSCSD) - Stage 1 " . 

[30] 3GPP TS 22.09 1 : "Explicit Call Transfer (ECT) supplementary service - Stage 1 " . 

[31] 3GPP TS 22.072: "Call Deflection (CD) supplementary service - Stage 1". 

[32] ISO/IEC 10646: "Universal Multiple-Octet Coded Character Set (UCS)"; UCS2, 16 bit coding. 

[33] 3GPP TS 22.022: "Personahzation of GSM Mobile Equipment (ME) Mobile functionality 

specification". 

[34] 3GPP TS 27.060: "General requirements on Mobile Stations (MS) supporting General Packet 

Radio Bearer Service (GPRS)". 

[35] Void. 

[36] CCITT Recommendation V. 120: "Support by an ISDN of data terminal equipment with V-Series 

type interfaces with provision for statistical multiplexing". 

[37] Void. 

[38] 3GPP TS 45.005: "Radio transmission and reception". 

[39] 3GPP TS 29.061 : "Interworking between the Public Land Mobile Network (PLMN) supporting 

GPRS and Packet Data Networks (PDN)". 

[40] 3GPP TS 23 .08 1 : "Line identification supplementary services - Stage 2" . 

[41] 3GPP TS 27.001: "General on Terminal Adaptation Functions (TAF) for Mobile Stations (MS)". 

[42] 3GPP TS 29.007: "General requirements on interworking between the Public Land Mobile 
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[44] IrDA Object Exchange Protocol. 

[45] 3GPP TS 27.010: "Terminal Equipment to User Equipment (TE-UE) multiplexer protocol User 
Equipment (UE)". 
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[48] Void. 
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[50J 3GPP TS 43.069: "Voice Broadcast Service (VBS) - Stage 2". 

[51] Void. 

[52] 3GPP TS 44.068: "Voice Group Call service (VGCS) - Stage 3". 
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[53] 3GPP TS 44.069: "Voice Broadcast Service (VBS) - Stage 3". 

[54] 3GPP TS 22.067: "enhanced Multi-Level Precedence and Pre-emption service (eMLPP) - 

Stage 1". 

[55] 3GPP TS 42.068: "Voice Group Call service (VGCS) - Stage 1". 

[56] 3GPP TS 42.069: "Voice Broadcast Service (VBS) - Stage 1 " . 

[57] Void. 

[58] 3GPP TS 22.087: "User-to-User SignalUng (UUS) - Stage 1". 

[59] 3GPP TS 31.102: "Characteristics of the Universal Subscriber Identity Module (USIM) 

Application". 

[60] ETSI TS 102 221 "Smart Cards; UICC-Terminal interface; Physical and logical characteristics 

(Release 1999)". 

[61] 3GPP TS 44.065: "Mobile Station (MS) - Serving GPRS Support Node (SGSN); Subnetwork 

Dependent Convergence Protocol (SNDCP)". 

[62] 3GPP TS 25 .323 : "Packet Data Convergence Protocol (PDCP)" . 

[63] 3GPP TS 23.227 "Apphcations and User interaction in the UE-Principles and specific 

requirements". 

[64] Void. 

[65] 3GPP TS 3 1 . 10 1 : "UICC-Terminal Interface; Physical and Logical Characteristics. " 

[66] ETSI TS 102 310: "Smart Cards; Extensible Authentication Protocol support in the UICC" . 

[67] Void. 

[68] RFC 3748: "Extensible Authentication Protocol (EAP)". 

[69] RFC 3629: "UTF-8, a transformation format of ISO 10646". 

[70] 3GPP TS 44.3 18: "Generic Access (GA) to the A/Gb interface; Mobile GA interface layer 3 

specification". 

[71] 3GPP TS 44.060: "General Packet Radio Service (GPRS); Mobile Station (MS) - Base Station 

System (BSS) interface; Radio Link Control/Medium Access Control (RLC/MAC) protocol". 

[72] 3GPP TS 25.308: "High Speed Downlink Packet Access (HSDPA): Overall Description; Stage 2" . 

[73] 3GPP TS 25.319: "Enhanced Uplink; Overall Description; Stage 2". 

[74] 3GPP TS 25 .33 1 : "Radio Resource Control (RRC) protocol specification" . 

[75] 3GPP TS 24.216: "Communication Continuity Management Object (MO)". 

[76] 3GPP TS 23.032: "Universal Geographical Area Description (GAD)". 

[77] 3GPP TS 25.305 "User Equipment (UE) positioning in Universal Terrestrial Radio Access 

Network (UTRAN); Stage 2". 

[78] lEC 61 162: "Maritime navigation and radio communication equipment and systems - Digital 

interfaces". 

[79] 3GPP TS 44.03 1 : "Location Services (LCS); Mobile Station (MS) - Serving Mobile Location 

Centre (SMLC), Radio Resource LCS Protocol (RRLP)". 

[80] 3GPP TS 49.031: "Base Station System Application Part, LCS Extension (BSSAP-LE)". 

[81] Void. 
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[82] 3GPP TS 23.401: "GPRS enhancements for E-UTRAN access". 

[83] 3GPP TS 24.301 : "Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS)" . 

[84] Void. 

[85] 3GPP TS 23 .203 : "Policy and charging control architecture" . 

[86] 3GPP TS 36.33 1 : "Evolved Universal Terrestrial Radio Access (E-UTRA); Radio Resource 

Control (RRC); Protocol specification". 

[87] 3GPP TS 24.173: "IMS multimedia telephony communication service and supplementary services; 

Stage 3". 

[88] RFC 429 1 : "IP Version 6 Addressing Architecture" . 

[89] 3GPP TS 24.229: "IP multimedia call control protocol based on Session Initiation Protocol (SIP) 

and Session Description Protocol (SDP)". 

[90] 3GPP TS 23.221: "Architectural requirements". 

[91] 3GPP TS 24.237: "IP Multimedia Subsystem (IMS) Service Continuity". 

[92] 3GPP TS 3 1 . 1 1 1 : "Universal Subscriber Identity Module (USIM) Application Toolkit (USAT)" . 

[93] 3GPP TS 22.096: "Name identification supplementary services - Stage 1". 

[94] 3GPP TS 23.096: "Name identification supplementary services - Stage 2". 

[95] 3GPP TS 25.133: "Requirements for support of radio resource management (FDD)". 

[96] 3GPP TS 25.123: "Requirements for support of radio resource management (TDD)". 

[97] 3GPP TS 36.133: "Evolved Universal Terrestrial Radio Access (E-UTRA); Requirements for 

support of radio resource management" . 

[98] 3GPP TS 3 1 . 102: "Characteristics of the Universal Subscriber Identity Module (USIM) 

application". 
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3 Definitions and abbreviations 
3.1 Definitions 

For the purposes of the present document, the following syntactical definitions apply (refer also clause 4): 
<CR> Carriage return character, which value is specified with command S3. 

<LF> Linefeed character, which value is specified with command S4. 

< . . . > Name enclosed in angle brackets is a syntactical element. Brackets themselves do not appear in the 

command line. 

[ . . . ] Optional subparameter of a command or an optional part of TA information response is enclosed 

in square brackets. Brackets themselves do not appear in the command line. When subparameter is 
not given in parameter type commands, new value equals to its previous value. In action type 
commands, action should be done on the basis of the recommended default setting of the 
subparameter. 

underline Underlined defined subparameter value is the recommended default setting of this subparameter. 

In parameter type commands, this value should be used in factory settings which are configured 
by ITU-T Recommendation V.250 [14] command &F0. In action type commands, this value 
should be used when subparameter is not given. 



3.2 Abbreviations 



For the purposes of the present document, the following abbreviations apply: 



AT 


ATtention; this two-character abbreviation is always used to start a command line to be sent from 




TE to TA 


ASCI 


Advanced Speech Call Items, including VGCS, VBS and eMLPP 


BCD 


Binary Coded Decimal 


eMLPP 


Enhanced Multi-Level Precedence and Pre-emption Service 


ETSI 


European Telecommunications Standards Institute 


FTM 


Frame Tunnelhng Mode (refer 3GPP TS 27.001 [41] and 3GPP TS 29.007 [42]) 


HSCSD 


High Speed Circuit Switched Data 


IMEI 


International Mobile station Equipment Identity 


IRA 


International Reference Alphabet (ITU-T Recommendation T.50 [13]) 


IrDA 


Infrared Data Association 


ISO 


International Standards Organization 


ITU-T 


International Telecommunication Union - Telecommunications Standardization Sector 


ME 


Mobile Equipment 


MoU 


Memorandum of Understanding (GSM operator joint) 


MT 


Mobile Termination 


PCCA 


Portable Computer and Communications Association 


PTT 


Push to Talk 


RDI 


Restricted Digital Information 


RLP 


Radio Link Protocol 


SIM 


Subscriber Identity Module 


TA 


Terminal Adaptor, e.g. a GSM data card (equal to DCE; Data Circuit terminating Equipment) 


TE 


Terminal Equipment, e.g. a computer (equal to DTE; Data Terminal Equipment) 


TIA 


Telecommunications Industry Association 


UDI 


Unrestricted Digital Information 


UE 


User Equipment 


UICC 


Universal Integrated Circuit Card 


USAT 


USIM Apphcation Toolkit 


USIM 


Universal Subscriber Identity Module 


VBS 


Voice Broadcast Service 
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4 AT command syntax 
4.0 General 

This clause summarizes general aspects on AT commands and issues related to them. 

TE software implementors must take account that future versions of this specification may include additional 
parameters beyond what is expected in any response to an AT Set Command, Read Command, Test Command, or 
unsolicited result code. Implementations must therefore analyse all parameters provided from the TA and discard 
(ignore) any parameters received following the parameters expected by the TE software. 

For further information refer ITU-T Recommendation V.250 [14]. 



4.1 Command line 

See figure 2 for general structure of a command line. Standardized basic commands are found only in 
ITU-T Recommendation V.250 [14]. GSM/UMTS commands use syntax rules of extended commands. Every extended 
command has a test command (trailing =?) to test the existence of the command and to give information about the type 
of its subparameters. Parameter type commands also have a read command (trailing ?) to check the current values of 
subparameters. Action type coimnands do not store the values of any of their possible subparameters, and therefore do 
not have a read command. 



subparameter 



read command for checking 
current subparameter values 



... ,. , extended commands are 
command line prefix delimited with semicolon 



command line 
termination character 



ATCMD1 CMD2=12; +CMD1; +CMD2=„15; +CMD2?; +CMD2=?<CR> 



basic command 

(no + prefix) extended command 
(prefixed with +) 



subparameters 
may be omitted 



fesf command ior checking 
possible subparameter values 



Figure 2: Basic structure of a command line 



If verbose responses are enabled with command VI and all commands in a command hne has been performed 
successfully, result code <CR><LF>OK<CR><LF> is sent from the TA to the TE. If numeric responses are enabled 
with command VO, result code 0<CR> is sent instead. 

If verbose responses are enabled with command VI and subparameter values of a command are not accepted by the TA 
(or command itself is invalid, or command cannot be performed for some reason), result code 
<CR><LF>ERROR<CR><LF> is sent to the TE and no subsequent commands in the command line are processed. If 
numeric responses are enabled with command VO, result code 4<CR> is sent instead. ERROR (or 4) response may be 
replaced by +CME ERROR : <err> (refer clause 9) when command was not processed due to an error related to MT 
operation. 
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4.2 Information responses and result codes 

The TA response for the example command line of figure 2 could be as shown in figure 3. Here, verbose response 
format is enabled with command VI. If numeric format VO would have been used, <CR><LF> headers of information 
responses would have been left out and final result code changed to 0<CR>. 

information response to +CMD2=? subparameters possible 

information response to +CMD2? 



<CR><LF>+CMD2: 3,0,1 5,"GSM"<CR><LF> 
><CR><LF>+CMD2:(0-3),(0,1),(0-12,15),("GSM","IRA")<CR><LF> 
<CR><LF>OK<CR><LF> K 



shows acceptable ranges of each subparameter 
final result code 

Figure 3: Response to a command line 

So called intermediate result codes inform about progress of TA operation (e.g. connection establishment CONNECT), 
and so called unsolicited result codes indicate occurrence of an event not directly associated with issuance of a 
command from TE (e.g. ring indication RING). 



4.3 ITU-T Recommendation V.250 [1 4] TE-TA interface 
commands 

Table 1 summarizes ITU-T Recommendation V.250 [14] commands relating to command line and response formatting, 
and TA-TE interface operation. All are applicable to GSM/UMTS terminals. 



Table 1 : V.250 commands relating to TE-TA interface 



Command 


Subclause 


Impl. 


Use in GSM/UMTS 


S3= [<value>] 


6.2.1 


mand. 


command line termination character (mandatory default setting IRA 13) 


S4= [<value>] 


6.2.2 


mand. 


response formatting character (recommended default IRA 10) 


S5= [<value>] 


6.2.3 


mand. 


command line editing character (reconmiended default IRA 8) 


E [<value>] 


6.2.4 


mand. 


command echo (recommended default 1 i.e. TA echoes commands 
back) 


Q [<value>] 


6.2.5 


mand. 


result code suppression (recommended default i.e. TA transmits result 

codes) 


V [<value>] 


6.2.6 


mand. 


TA response format (recommended default 1 i.e. verbose format) 


X [<value>] 


6.2.7 


mand. 


defines CONNECT result code format; values manufacturer specific 


&C [<value>] 


6.2.8 


mand. 


determines how ITU-T V.24 circuit 109 (or equivalent) relates to the 
detection of received line signal from remote end (recommended default 
1 i.e. 109 operation relates to detection of received signal) 


&D [< value >] 


6.2.9 


mand. 


determines how TA responds when ITU-T V.24 circuit 108/2 (or 
equivalent) is changed from ON to OFF condition during online data 
state 


+ IPR= [<value>] 


6.2.10 


opt. 


fixed TE data rate (recommended default i.e. automatic detection) 


+ ICF= [<format> [ 
, <parity>] ] 


6.2.11 


opt. 


TE-TA character framing (recommended default 3,3 i.e. eight data bits, 
no parity, 1 stop bit) 


+IFC= [<by_te> [ 

, <by_ta>] ] 


6.2.12 


opt. 


TE-TA local flow control (recommended default 2,2 i.e. TE uses ITU-T 
V.24 circuit 133 (or equivalent), and TA circuit 106 (or equivalent)) 


+ILRR= [<value>] 


6.2.13 


opt. 


determines whether the used local TE-TA data rate is informed using 
intermediate result code +ILRR : <rate> before going online data 
state after call answering or originating 
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5 General commands 

5.0 General 

ITU-T Recommendation V.250 [14] includes "Generic DCE Control" commands with the prefix +G. These commands 
are for the identification of the TA. Four of those commands are adapted here to be the identification commands of the 
MT. Syntax is otherwise similar but the prefix is +CG. TIA IS-99 [15] uses same commands for base station 
identification. 

5.1 Request manufacturer identification +CGMI 



Table 2: +CGMI action command syntax 



Command 


Possible response(s) 


+CGMI 


<inanuf acturer> 
+CME ERROR: <err> 


+CGMI=? 





Description 

Execution command causes the TA to return one or more lines of information text <manuf acturer>, determined by 
the MT manufacturer, which is intended to permit the user of the TA to identify the manufacturer of the MT to which it 
is connected to. Typically, the text will consist of a single line containing the name of the manufacturer, but 
manufacturers may choose to provide more information if desired. Refer subclause 9.2 for possible <err> values. 

Defined values 

<manuf acturer>: the total number of characters, including Une terminators, in the information text shall not 
exceed 2048 characters. 

Text shall not contain the sequence 0<CR> or OK<CR> 

Implementation 

Optional. 

5.2 Request model identification +CGMM 



Table 3: +CGMM action command syntax 



Command 


Possible response(s) 


+ CGMM 


<model> 

+CME ERROR: <err> 


+CGMM=? 





Description 

Execution command causes the TA to return one or more hues of information text <model >, determined by the MT 
manufacturer, which is intended to permit the user of the TA to identify the specific model of the MT to which it is 
connected to. Typically, the text will consist of a single line containing the name of the product, but manufacturers may 
choose to provide more information if desired. Refer subclause 9.2 for possible <err> values. 

Defined values 
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<model >: the total number of characters, including line terminators, in the information text shall not exceed 2048 
characters. 

Text shall not contain the sequence 0<CR> or OK<CR> 

Implementation 

Optional. 

5.3 Request revision identification +CGI\/IR 



Table 4: +CGMR action command syntax 



Command 


Possible response(s) 


+CGMR 


<revision> 

+CME ERROR: <err> 


+CGMR=? 





Description 

Execution command causes the TA to return one or more lines of information text <revision>, determined by the 
MT manufacturer, which is intended to permit the user of the TA to identify the version, revision level or date, or other 
pertinent information of the MT to which it is connected to. Typically, the text will consist of a single line containing 
the version of the product, but manufacturers may choose to provide more information if desired. Refer subclause 9.2 
for possible <err> values. 

Defined values 

<revision>: the total number of characters, including line terminators, in the information text shall not exceed 
2048 characters. 

Text shall not contain the sequence 0<CR> or OK<CR> 

Implementation 

Optional. 

5.4 Request product serial number identification +CGSN 



Table 5: +CGSN action command syntax 



Command 


Possible response(s) 


+CGSN 


<sn> 

+CME ERROR: <err> 


+CGSN=? 





Description 

Execution command causes the TA to retum one or more lines of information text <sn>, determined by the MT 
manufacturer, which is intended to permit the user of the TA to identify the individual MT to which it is connected to, 
Typically, the text will consist of a single line containing the IMEI (International Mobile station Equipment Identity; 
refer 3GPP TS 23.003 [7]) number of the MT, but manufacturers may choose to provide more information if desired. 
Refer subclause 9.2 for possible <err> values. 

Defined values 
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<sn>: the total number of characters, including line terminators, in the information text shall not exceed 2048 
characters. 

Text shall not contain the sequence 0<CR> or OK<CR> 

Implementation 

Optional. 

5.5 Select TE character set +CSCS 

Table 6: +CSCS parameter command syntax 



Command 


Possible response(s) 


+CSCS= [<chset>] 




+CSCS? 


+CSCS: <chset> 


+cscs=? 


+CSCS : (Ustof supported <chset>s) 



Description 

Set command informs TA which character set < chset > is used by the TE. TA is then able to convert character strings 
correctly between TE and MT character sets. 

When TA-TE interface is set to 8-bit operation and used TE alphabet is 7-bit, the highest bit shall be set to zero. 

NOTE: It is manufacturer specific how the intemal alphabet of MT is converted to/from the TE alphabet. 
Read command shows current setting and test command displays conversion schemes implemented in the TA. 
Defined values 

<chset>: character set as a string type (conversion schemes not listed here can be defined by manufacturers) 

" GSM " GSM 7 bit default alphabet (3GPP TS 23.038 [25]); this setting causes easily software flow control 
(XON/XOFF) problems. 

"HEX" Character strings consist only of hexadecimal numbers from 00 to FF; e.g. "032FE6" equals three 
8-bit characters with decimal values 3, 47 and 230; no conversions to the original MT character set 
shall be done. 

If MT is using GSM 7 bit default alphabet, its characters shall be padded with 8th bit (zero) before converting them to 
hexadecimal numbers (i.e. no SMS-style packing of 7-bit alphabet). 

" IRA" International reference alphabet (see ITU-T Recommendation T.50 [13]). 

" PCCPxxx" PC character set Code Page xxx 

" PGDN " PC Danish/Norwegian character set 

"UGS2 " 16-bit universal multiple-octet coded character set (see ISO/IEC10646 [32]); UCS2 character 
strings are converted to hexadecimal numbers from 0000 to FFFF; e.g. "004100620063" equals 
three 16-bit characters with decimal values 65, 98 and 99. 

" UTF - 8 " Octet (8-bit) lossless encoding of UCS characters (see RFC 3629 [69]); UTF-8 encodes each UCS 
character as a variable number of octets, where the number of octets depends on the integer value 
assigned to the UCS character. The input format shall be a stream of octets. It shall not be 
converted to hexadecimal numbers as in "HEX" or "UCS2". This character set requires an 8-bit 
TA - TE interface. 

" 8 8 5 9 - n " ISO 8859 Latin n (1-6) character set 

" 8 8 5 9 - G " ISO 8859 Latin/Cyrillic character set 
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" 8859-A" ISO 8859 Latin/Arabic character set 
" 8 8 5 9 - G " ISO 8859 Latin/Greek character set 
" 8 8 5 9 - H " ISO 8859 Latin/Hebrew character set 
Implementation 

Mandatory when a command using the setting of this command is implemented. 

5.6 Request international mobile subscriber identity +CIMI 



Table 7: +CIMI action command syntax 



Command 


Possible response(s) 


+ CIMI 


<IMSI> 

+CME ERROR: <err> 


+CIMI=? 





Description 

Execution command causes the TA to return < IMSI >, which is intended to permit the TE to identify the individual 
SIM card or active apphcation in the UICC (GSM or USIM) which is attached to MT. Refer subclause 9.2 for possible 
<err> values. 

Defined values 

< IMSI >: International Mobile Subscriber Identity (string without double quotes) 
Implementation 
Optional. 

5.7 Multiplexing mode +CMUX 



Table 8: +CMUX parameter command syntax 



Command 


Possible response(s) 


+CMUX=<mode> [ , <subset> [ , < 
port_speed> [ , <N1> [ , <T1> [ , 
<N2> [, <T2> [, <T3> [, <k>] ] ] ] 
] ] ] ] 


+CME ERROR: <err> 


+CMUX? 


+CMUX: <niode>, [< subset >], <port speed> , <N1> , < 
Tl>, <N2>, <T2>, <T3> [, <k>] 

+CME ERROR: <err> 


+CMUX=? 


+CMUX : (Ust of supported <mode>s) , (list of supported 
<subset>s) , (list of supported <port speed>s) , (list of 
supported <Nl>s) , (list of supported <Tl>s) , (list of 
supported <N2>s) , (Ust of supported <T2>s) , (list of 
supported <T3>s) , (Ust of supported <k>s) 



Description 

This command is used to enable/disable the 3GPP TS 27.010 [45] multiplexing protocol control channel. Refer 
subclause 9.2 for possible <err > values. The AT command sets parameters for the Control Channel. If the parameters 
are left out, the default value is used. 
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Read command returns the current mode and the settings. 
Test command returns the supported modes and parameters. 

It is recommended that the MT/TA/rE should autobaud to the +CMUX command up to and including an interface speed 
of 9600bits/s. 

The OK or +CME ERROR : <err> response is returned at the speed of the +CMUX command prior to entering 
<mode>. 

It is recommended that whenever the multiplexer control channel is released the MT/TA/TE should assume an interface 
rate of up to and including 9600 bits/s for auto bauding purposes irrespective of any previous higher speed having been 
selected. 

If a +CMUX command is issued whilst in any multiplexer mode then that +CMUX command shall be ignored and the 
MT/TA shall return a +CME ERROR: < err > response. 

Defined values 

<operation>: integer type (multiplexer Transparency Mechanism) 

Basic option 

1 Advanced option 

<subset >: integer type. This parameter defines the way in which the multiplexer control channel is set up. A 
virtual channel may subsequently be set up differently but in the absence of any negotiation for the settings of a 
virtual channel, the virtual channel shall be set up according to the control channel < subset > setting. 

UIH frames used only 

1 UI frames used only 

2 1 frames used only 
<port_speed> integer type (transmission rate) 

1 9 600 bit/s 

2 19 200 bit/s 

3 38 400 bit/s 

4 57 600 bit/s 

5 115 200 bit/s 

6 230 400 bits/s 

<N1 >: integer type (maximum frame size) 

1- 32768, where the 31 is default for Basic option and 64 is default for Advanced option (see <operation>) 
<T1 >: integer type (acknowledgement timer in units of ten milhseconds) 

1- 255, where 10 is default (100 ms) 

<N2 >: integer type (maximum number of re-transmissions) 

0-100, where 3 is default 
<T2 >: integer type (response timer for the multiplexer control channel in units of ten milliseconds) 

2- 255, where 30 is default (300 ms) 
NOTE: T2 must be longer than Tl . 
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<T3 >: integer type (wake up response timer in seconds) 

1-255, where 10 is default 
<k>: integer type (window size, for Advanced operation with Error Recovery options) 

1-7, where 2 is default 
Implementation 

Mandatory, if 3GPP TS 27.010 [45] supported in the MT/TA. 
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5.8 ITU-T Recommendaton V.250 [1 4] generic TA control 
commands 

Table 9: V.250 generic TA control commands 



Command 


Subclause 


impl. 


Use In GSM/UMTS 


Z [<value>] 


6.1.1 


mand. 


TA sets all parameters to their defaults as specified by a user 
memory profile or by the manufacturer, and resets TA 


&F [<value>] 


6.1.2 


mand. 


TA sets all parameters to their defaults as specified by the 

lllallUlaL^LUlCl 


I [<value>] 


6.1.3 


opt. 


request manufacturer specific information about the TA (software 

cuTWint iisp tnis fiTmnnsmn tn nptpmninp trip fnnnnilitips c\t n TA^ 
L/cuiiiui Ui3& una L'Uiiiiiiciiiu- uddiiiiiic iiic L/djJduiiiiids \j± a ii^j 


+GMI 


6.1.4 


mand. 


request TA manufacturer identification (may equal to +CGMI) 


+GMM 


6.1.5 


mand. 


request TA model identification (may equal to +CGMM) 


+GMR 


6.1.6 


mand. 


request TA revision identification (may equal to +CGMR) 


+GSN 


6.1.7 


opt. 


request TA serial number identification (may equal to +CGSN) 


+GOI 


6.1.8 


opt. 


request ISO system global object identification of the TA (general 
format defined in ITU-T Recommendation X.208; encoding rules 
in ITU-T Recommendation X.209) 


+GCAP 


6.1.9 


mand. 


request overall capabilities of TA; the response code for a TA 
building on this document shall be +CGSM 


+GCI=<T. 35> 


6.1.10 


opt. 


selects the country of installation for the TA using ITU-T 
Recommendation T.35 Annex A country codes 



5.9 PCCA STD-1 01 [1 7] select wireless network +WS46 

PCCA STD-101 [17] includes a command to select the cellular network (Wireless Data Service; WDS) to operate with 
the TA. PCCA calls this WDS-Side Stack Selection. This connmand may be used when TA is asked to indicate the 
networks in which it can operate. 



Table 10: +WS46 parameter command syntax 



Command 


Possible response(s) 


+WS46= [<n>] 




+WS46? 


<n> 


+WS46=? 


(list of supported <n>s) 



Description 

Set command selects the WDS side stack <n> to be used by the TA. Read command shows current setting and test 
command displays side stacks implemented in the TA. 

Defined values for Query 

<n>: integer type 

12 GSM Digital Cellular Systems (GERAN only) 
22 UTRAN only 

25 3GPP Systems (GERAN, UTRAN and E-UTRAN) 

28 E-UTRAN only 

29 GERAN and UTRAN 

30 GERAN and E-UTRAN 
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31 UTRAN and E-UTRAN 

The values in <n> for Query are mutually exclusive. If one value (e.g. "25") is returned, other values shall not be 
returned. 

Defined values for Set 

<n>: integer type 



12 3GPP System 



22 


Not used. 


If received, 


the value 


shall be treated 


as 


if 


12 


had been received or an ERROR 


shall be returned. 


25 


Not used. 


If received, 


the value 


shall be treated 


as 


if 


12 


had been received or an ERROR 


shall be returned. 


28 


Not used. 


If received, 


the value 


shall be treated 


as 


if 


12 


had been received or an ERROR 


shall be returned. 


29 


Not used. 


If received. 


the value 


shall be treated 


as 


if 


12 


had been received or an ERROR 


shall be returned. 


30 


Not used. 


If received. 


the value 


shall be treated 


as 


if 


12 


had been received or an ERROR 


shall be returned. 


31 


Not used. 


If received. 


the value 


shall be treated 


as 


if 


12 


had been received or an ERROR 


shall be returned. 



refer PCCA STD-101 [17] for other values. 
Implementation 

Mandatory in PCCA STD-101 [17], but optional for GSM/UMTS/EPS. 

5.10 Informative examples 

When beginning to build a communication link, a general TE application controlling a TA needs to determine the TA 
and the MT to which it is coimected. ITU-T Recommendation V.250 [14] has seven commands for TA identification 
from which four are mandatory to be implemented in a TA. An example of this command sequence requesting 
manufacturer (+GMI), model (+GMM), revision (+GMR) and serial number (+GSN) information would be: 

AT+GMI 

Manufacturer ABC 
OK 

AT+GMM 

GSM Ultimate Data Device 
OK 

AT+GMR 
1 . 00 
OK 

AT+GSN 

987612345-123 
OK 

The maximum lengths of the information responses are defined to be 2048 characters, but it is recommended that they 
are kept as simple as in the example. The serial number command is defined as optional. Another optional command is 
Global Object Identification command (+GOI) which should return the object identifiers of 
ITU-T Recommendation X.208 as numeric strings delimited by periods. The Complete Capabilities List command 
(+GCAP) should indicate the major capability areas of the TA. The support of different areas is presented in the 
response of +GCAP command. Each area may be presented by the selection command name of a specific capability area 
(e.g. +FCLASS for fax support) or some other predefined response. For instance, a GSM TA with fax capabiUties could 
respond as follows: 

AT+GCAP 

+GCAP: +CGSM,+FCLASS,+W 
OK 

The first supported area in the response is presented with +CGSM. It is the response text to show that some or all GSM 
commands of the present document are supported. Second response text (+FCLASS) informs that some fax or voice 
capabilities are present, and the third text (+W) about the presence of wireless commands as specified by 
PCCA STD-101 [17]. Command +FCLASS=? (refer e.g. ITU-T Reconnmendation T.31 [11] and 
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ITU-T Recommendation T.32 [12]) should be used to query the supported fax capabilities and +WS46 = ? to query the 

wireless data services available: 

AT+FCLASS=? , -+1^346 = ? 
0,1,2,2.0 
(12) 
OK 

The TA of this example supports GSM data services, and fax service class 1 (TIA-578-A), 2 (manufacturer specific) 
and 2.0 (ITU-T Recommendation T.32 [12] / TIA-592). 

The present document defines commands for MT identification which are similar to those for TA identification in 
ITU-T Recommendation V.250 [14], for an example: 

AT+CGMI 

Mobile Manufacturer XYZ 

OK 

AT+CGMM 

GSM Phone 1234 

OK 

AT+CGMR 

1.00 

OK 

AT+CGSN 

123456121234561 
OK 

Manufacturer, model and version commands work similarly as for TA, except that the serial number query returns the 
International Mobile Station Equipment Identity (IMEI) number. IMEI is fifteen digits long and consists of a type 
approval code, a final assembly code, a serial number and a spare digit (refer 3GPP TS 23.003 [7]). When the TA is 
implemented inside MT, the responses for both TA and MT queries will most Ukely follow the responses of MT 
identification. 



6 Call control commands and methods 



6.0 General 

This clause describes the control of GSM/UMTS calls. Normal data and fax call control is done as in ITU-T 
Recommendations V.250 [14], T.31 [11] and T.32 [12]. For voice call originating, refer subclause 
"ITU-T Reconnmendation V.250 dial cononoand D". 

6. 1 Select type of address +CSTA 



Table 1 1 : +CSTA parameter command syntax 



Command 


Possible response(s) 


+CSTA= [<type>] 




+CSTA? 


+CSTA: <type> 


+CSTA=? 


+CSTA: (list of supported <type>s) 



Description 

Set command selects the type of number for further dialling commands (D) according to GSM/UMTS specifications. 
Test connmand returns values supported a compound value. 

Defined values 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7); default 145 when 
dialling string includes international access code character "+", otherwise 129 

Implementation 
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Mandatory when other than default value allowed. 

6.2 ITU-T Recommendation V.250 [14] dial command D 

ITU-T Recommendation V.250 [14] dial command D Usts characters that may be used in a dialling string for making a 
call or controlling supplementary services in accordance with 3GPP TS 22.030 [19]. Their use in GSM/UMTS is listed 
in this subclause, as well as new dial modifiers applicable only to GSM/UMTS are introduced. For a MT supporting AT 
commands only, it is mandatory to support the control of supplementary services in accordance with 
3GPP TS 22.030 [19] through the dial command or through the specific supplementary service commands (+CCFC, 
+CLCK, etc.), where 3GPP TS 22.030 [19] identifies the supplementary services as mandatory. 

V.250 dialling digits 

1234567890*#+ABC (implementation of these characters is mandatory for GSM/UMTS) 
D (implementation of this character is optional for GSM/UMTS, and it is ignored) 
V.250 modifier characters 

, (implementation of this character is mandatory for GSM/UMTS, but it may be ignored) 
T P (implementation of these characters is mandatory for GSM/UMTS, but they are ignored) 
! W @ (implementation of these characters is optional for GSM/UMTS, and they are ignored) 
V.250 semicolon character 

In GSM/UMTS, when semicolon character is given after dialling digits (or modifiers), a voice call originated to the 
given address. TA returns to command state immediately (or after possible +COLP result code; refer subclause 
"Cormected Une identification presentation +COLP"). Refer Aimex G for a detailed example. 

GSM/UMTS modifier characters 

> (refer subclause "Direct dialling from phonebooks") 

I or i (override the CLIR supplementary service subscription default value for this call; I = invocation (restrict CLI 
presentation) and i = suppression (allow CLI presentation); refer subclause "Calling line identification restriction 
+CLIR") 

G or g (control the CUG supplementary service information for this call; uses index and info values set with command 
+CCUG; refer subclause "Closed user group +CCUG") 

6.3 Direct dialling from phonebooks 

GSM/UMTS MT and SIM/UICC can contain phonebooks which have a phone number and an alphanumeric field for 
each phonebook entry location. The use of ITU-T Recommendation V.250 [14] dialhng command ensures that direct 
dialling from MT and SIM/UICC phonebook is possible through ordinary communications software which just gives 
the phone number field to be filled and then use the D command to originate the call. Available memories may be 
queried with Select Phonebook Storage test command +CPBS = ?, and location range for example with Read Phonebook 
Entries test command +CPBR=?. 

Execute commands 

1. D><str>[I] [G] [;] originate call to phone number which corresponding alphanumeric field is<str>(if 

possible, all available memories should be searched for the correct entry). 

2. D>mem<n> [I] [G] [ ; ] originate call to phone number in memory mem entry location <n> (available memories 

may be queried with Select Phonebook Storage test command +CPBS=?; mem could be 
e.g. ME). 

3. D><n> [I] [G] [;] originate call to phone number in entry location <n> (it is manufacturer specific which 

memory storage of MT, SIM/UICC in the currently selected card slot and TA is used; 
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command Select Phonebook Memory Storage +CPBS setting is recommended to be 
used). 

Semicolon character shall be added when voice call is originated. CLIR and CUG per call base modifiers may also be 
present. 

Responses 

Possible error responses include +CME ERROR : <err> when error is related to MT fiinctionality. Refer 
subclause 9.2 for possible error values. Otherwise TA responses can have values defined by 

ITU-T Recommendation V.250 [14] and commands Service Reporting Control +CR and Connected Line Identification 
Presentation +COLP. Detailed error report of an unsuccessful originated call failed in a GSM/UMTS network error can 
be obtained with coimnand Extended Error Report +CEER (if implemented). 

Defined values 

<str>: string type value, which should equal to an alphanumeric field in at least one phonebook entry in the 
searched memories; used character set should be the one selected with Select TE Character Set +CSCS 

<n>: integer type memory location should be in the range of locations available in the memory used 

Implementation 

Mandatory when direct dialUng is implemented. Also phonebook connmands implementation is required. 
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6.4 Call mode +CMOD 



Table 12: +CMOD parameter command syntax 



Command 


Possible response(s) 


+CMOD= [<mode>] 




+CMOD? 


+CMOD: <mode> 


+CMOD=? 


+CMOD : {list of supported <niode>s) 



Description 

Set command selects the call mode of further dialling commands (D) or for next answering command (A). Mode can be 
either single or alternating (in the present document, terms "alternating mode" and "alternating call" refer to all 
GSM/UMTS bearer and teleservices that incorporate more than one basic service (voice, data, fax) within one call). 
When single mode is selected the call originating and hangup procedures are similar to procedures specified in ITU-T 
Recommendations V.250 [14], T.31 [11] and T.32 [12]. In GSM/UMTS there can be voice followed by data (refer 
3GPP TS 22.002 [1]), alternating voice/data (refer 3GPP TS 22.002 [1]) and alternating voice/fax calls (refer 
3GPP TS 22.003 [2]). Refer next two subclauses for alternating call control methods. 

Test command returns values supported as a compound value. 

NOTE: +CMOD shall be set to zero after a successfully completed alternating mode call. It shall be set to zero also 
after a failed answering. The power-up, factory (&:F) and user resets (Z) shall also set the value to zero. 
This reduces the possibiUty that alternating mode calls are originated or answered accidentally. 

Defined values 

<mode>: integer type 

single mode 

1 alternating voice/fax (teleservice 61) 

2 alternating voice/data (bearer service 61) 

3 voice followed by data (bearer service 81) 

all other values below 128 are reserved by the present document 
Implementation 

Mandatory when alternating mode calls are implemented in the TA. 

6.4A Voice Call Mode +CVMOD 



Table 13: +CVMOD parameter command syntax 



Command 


Possible response(s) 


+CVMOD= [<voice mode>] 




+CVMOD? 


+CVMOD: <voice mode> 


+CVMOD=? 


+CVMOD : (hst of supported <voice_mode>s) 



Description 

Set command selects the voice call mode for making a Mobile Originated voice call from the UE. The voice call mode 
can be CS_ONLY, VOIP_ONLY, CS_PREFERRED or VOIP_PREFERRED. Type of VoIP session preferred (e.g. SIP 
VoIP, IMS VoIP) is manufacturer specific issue. 

NOTE 1 : If the Call Mode is set to CS_ONLY, then the ATD conmiand will make a call in CS mode. 
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If the Call Mode is set to VOIP_ONLY, then the ATD command will make a caU in VoIP mode. 

If the Call Mode is set to CS_PREFERRED, then the ATD command gives preference for CS based voice 
call. 

If the Call Mode is set to VOIP_PREFERRED, then the ATD command gives preference for VoIP based 
voice call 

NOTE 2: The preferences are not applicable for the emergency call. 

NOTE 3: The preferences are not appUcable if operator has set preferences for UE originated calls/sessions, 
3GPP TS 24.216 [75] subclause 5.6. 

Read command returns the current value of <voice_mode>. 

Test command returns the values supported by the UE. 

Defined values 

<voice_mode>: integer type 

CS_ONLY 

1 VOIP_ONLY 

2 CS_PREFERRED 

3 VOIP_PREFERRED 
Implementation 

Optional. 

6.5 Hangup call +CHUP 



Table 13a: +CHUP action command syntax 



Command 


Possible response(s) 


+ CHUP 




+CHUP=? 





Description 

Execution command causes the TA to hangup the current GSM/UMTS call of the MT. 

NOTE: The purpose of this command is not to replace the ITU-T Recommendation V.250 [14] command H, but 
to give an assured procedure to terminate an alternating mode call. Refer next subclause. 

Implementation 

Mandatory when alternating mode calls implemented in the TA. 

6.6 Alternating mode call control method 

This subclause describes the procedure to handle alternating mode calls with AT commands. Procedures are mandatory 
when alternating mode calls are implemented in the TA. 

NOTE 1: ATH and drop DTR will not necessarily cause a hangup from voice mode. If the +CVHUis implemented 
the behaviour shall be controlled by its setting. 
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Voice followed by data call Qiearer service 81) 

Figure 4 shows commands to start the call, to switch from voice to data (In-Call Modification) and to hang up the call. 
+CMOD and +FCLASS commands indicate the current settings before dialling or answering command, not that they 
shall be given just before D or A command. Refer subclause "Cellular result codes +CRC" for possible +CRING result 
code values. Refer Annex F for a detailed example. 



MO 

AT+CM0D=3 
AT+FCLASS=0 




MT 

+CRING: VOICE/XXX 
AT+CMQD=3;+FCLASS=0 






AID or ATA or 




VOICE 


remote initiated ^ 


DATA 





AT+CHUP^r 
remote initiated liangup 
(or ATH 
or drop DTR) 



HANGUP 
TA sets +CI\/IOD= 



ATH or / 
drop DT^R or 
AT+<jHUP or 
^^refTiote initiated liangup 



Figure 4: Voice followed by data call 



Voice/ data call (bearer service number 61) 

Figure 5 shows the commands to start the call, to switch between modes (In-Call Modification) and to hang up the call. 
+CMOD and +FCLASS commands indicate the current settings before dialling or answering command, not that they 
shall be given just before D or A command. Refer subclause "Cellular result codes +CRC" for possible +CRING result 
code values. Refer Annex E for a detailed example. 



MT voice first 

+CRING: ALT VOICE/XXX 
AT+CMOD=2;+FCLASS=0 



MO 

AT+CM0D=2 
AT+FCLASS=0 



MT data first 

+GRING: ALT XXA7V0ICE 
AT+CMOD=2;+FCLASS=0 




AT+CHUPy 
remote initiati 
(or ATH 
or drop DTR) 



ATH or drop DTR or 
remote initiated 





UP or 

initiated hangup 



HANGUP 
TA sets +GMOD=0 



Figure 5: Alternating voice and data call 
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Voice/ fax call (teleservice number 61) 

Figure 6 shows the commands to start the call, to switch between modes (In-Call Modification) and to hang up the call. 
+CMOD and +FCLASS commands indicate the current settings before dialling or answering command, not that they 
shall be given just before D or A command. The parameter "x" of +FCLASS command can be 1, 1.0, 2 or 2.0. 

NOTE 2: The transition from fax mode to voice mode is for fiu'ther study. 
MT voice first 



+CRING: ALT VOICE/FAX 
AT+CM0D=1 ;+FCLASS=x 



MO 

AT+CM0D=1 
AT+FCLASS=x 



MT fax first 

+CRING: ALT FAX/VOICE 
AT+CM0D=1 ;+FCLASS=x 





AT+CHUk-or 
remote initi^ed hangup 
(or ATH 
or drop DTR) 



refer ITU-T T.31 [1 1 ] and T.32 [1 2] 
fordffferent hangup possibilities 
(also AT+CHUP shall hangup) 



HANGUP 
TA sets +CMOD=0 



Figure 6: Alternating voice and fax call 



6.7 Select bearer service type +CBST 

Table 14: +CBST parameter command syntax 



Command 


Possible response(s) 


+CBST= [<speed> [ , <nanie> [ , <ce>] ] ] 




+CBST? 


+CBST: <speed> , <name> , <ce> 


+CBST=? 


+ CBST: (list of supported < speed >s) , (list of 
SLipporlcd <name>s) , (list of supporled <ce>s) 



Description 

Set command selects the bearer service <name> with data rate <speed>, and the connection element <ce> to be used 
when data calls are originated (refer 3GPP TS 22.002 [1]). Values may also be used during mobile terminated data call 
setup, especially in case of single numbering scheme calls (refer +CSNS). 

Test command returns values supported as compound values. 

Defined values 

NOTE: The default values of the subparameters are manufacturer specific since they depend on the purpose of the 
device and data services provided by it. Not all combinations of these subparameters are supported by 
GSM/UMTS (refer 3GPP TS 22.002 [1]). 

<speed>: integer type 

autobauding (automatic selection of the speed; this setting is possible in case of 3.1 kHz modem and non- 
transparent service) 

1 300 bps (V.21) 
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2 1200 bps (V.22) 

3 1200/75 bps (V.23) 

4 2400 bps (V.22bis) 

5 2400 bps (V.26ter) 

6 4800 bps (V.32) 

7 9600 bps (V.32) 
12 9600 bps (V.34) 

14 14400 bps (V.34) 

15 19200 bps (V.34) 

16 28800 bps (V.34) 

17 33600 bps (V.34) 
34 1200 bps (V. 120) 
36 2400 bps (V. 120) 

38 4800 bps (V. 120) 

39 9600 bps (V.120) 
43 14400 bps (V.120) 

47 19200 bps (V.120) 

48 28800 bps (V.120) 

49 38400 bps (V.120) 

50 48000 bps (V.120) 

51 56000 bps (V.120) 

65 300 bps (V. 110) 

66 1200 bps (V.l 10) 

68 2400 bps (V. 1 10 or X.3 1 flag stuffing) 

70 4800 bps (V. 1 10 or X.3 1 flag stuffing) 

7 1 9600 bps (V. 1 1 or X.3 1 flag stuffing) 
75 14400 bps (V.l 10 or X.31 flag stuffing) 

79 19200 bps (V.l 10 or X.31 flag stuffing) 

80 28800 bps (V. 1 10 or X.3 1 flag stuffing) 

81 38400 bps (V.llO or X.31 flag stuffing) 

82 48000 bps (V.llO or X.31 flag stuffing) 

83 56000 bps (V.l 10 or X.3 1 flag stuffing; this setting can be used in conjunction with asynchronous non- 
transparent UDI or RDI service in order to get FTM) 

84 64000 bps (X.3 1 flag stuffing; this setting can be used in conjimction with asynchronous non-transparent 

UDI service in order to get FTM) 

1 15 56000 bps (bit transparent) 
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64nnn Hn^ rHit tmnsnnrpnt^ 


120 


32000 hns fPTAFS32k1 


121 


64000 hns fPTAFS64k1 






131 


32000 bps (multimedia) 


132 


33600 bps (multimedia) 


133 


56000 bps (multimedia) 


134 


64000 bps (multimedia) 



all other values below 128 are reserved by the present document. 
<name>: integer type 






data circuit asynchronous (UDl or 3.1 kHz modem) 


1 


data circuit synchronous (UDl or 3.1 kHz modem) 


2 


PAD Access (asynchronous) (UDl) 


3 


Packet Access (synchronous) (UDl) 


4 


data circuit asynchronous (RDI) 


5 


data circuit synchronous (RDI) 


6 


PAD Access (asynchronous) (RDI) 


7 


Packet Access (synchronous) (RDI) 



all other values below 128 are reserved by the present document. 
<ce>: integer type 

transparent 

1 non-transparent 

2 both, transparent preferred 

3 both, non-transparent preferred 
Implementation 

Mandatory when data calls implemented. 

6.8 Radio link protocol +CRLP 



Table 15: +CRLP parameter command syntax 



Command 


Possible response(s) 


+CRLP= [<iws> [ , <mws> [ , <T1> 
[,<N2> [,<ver> [,<T4>] ] ] ] ] ] 




+CRLP? 


+CRLP: <iws>, <mws>, <T1>, <N2> [, <verl> [, <T4>] ] 
[<CR><LF>+CRLP : <iws>, <niws>, <T1>, <N2> [, <ver2> [, <T4>] ] 
[...]] 
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+CRLP=? 



+CRLP: ( list of supported <iws>s) , (list of supported <mws>s) , 
(list of supported <Tl>s) , (list of supported <N2>s) [,<verl> 
[ , (list of supported <T4 >s) ] ] 

[<CR><LF>+CRLP : (Ust of supported <iws>s) , (Ust of supported 
<mws>s) , (list of supported <Tl>s) , (list of supported <N2>s) 
[ , <verl> [ , (list of supported <T4>s) ] ] 
[...]] 



Description 

Radio link protocol (RLP) parameters used when non-transparent data calls are originated may be altered with set 
command. Available command subparameters depend on the RLP versions implemented by the device (e.g. <ver> 
may not be available if device supports only versions and 1). 

NOTE 1 : If radio link protocol is not used, but some other error correcting protocol (for transparent data calls), 
ITU-T Recommendation V.250 [14] Error Control Selection test command +ES=? may be used to 
indicate the presence of the protocol. 

Read cormnand returns current settings for each supported RLP version <verx>. Only RLP parameters apphcable to 
the corresponding <verx> are returned. 

Test cormnand returns values supported as a compound value. If MT/TA supports several RLP versions <verx>, the 
RLP parameter value ranges for each <verx> are returned in a separate line. 

Defined values 

<ver>, <verx>: RLP version number in integer format; when version indication is not present it shaU equal 

NOTE 2: Versions and 1 share the same parameter set. Read and test conmiands shall return only one Une for this 
set (where <verx> is not present). 

<iws>, <mws>, <T1>, <N2>, <T4>: IWF to MS window size, MS to IWF window size, acknowledgement timer 

Tl, retransmission attempts N2, re-sequencing period T4 in integer format (default values and value ranges 
depend on RLP version; refer 3GPP TS 24.022 [18]): Tl and T4 are in units of 10 ms. 

Implementation 

Mandatory when RLP implemented. 



6.9 Service reporting control +CR 

Table 16: +CR parameter command syntax 



Command 


Possible response(s) 


+CR= [<mode>] 




+ CR? 


+CR: <mode> 


+ CR=? 


+CR : (list of supported <niode >s ) 



Description 

Set command controls whether or not intermediate result code +CR : <serv> is returned from the TA to the TE. If 
enabled, the intermediate result code is transmitted at the point during coimect negotiation at which the TA has 
determined which speed and quality of service will be used, before any error control or data compression reports are 
transmitted, and before the intermediate result code CONNECT is transmitted. 

NOTE: This command replaces ITU-T Recommendaion V.250 [14] command Modulation Reporting Control 

+MR, which is not appropriate for use in the GSM/UMTS network. Possible error control (other than radio 
link protocol) and data compression reporting can be enabled with V.250 commands Error Control 
Reporting +ER and Data Compression Reporting +DR. 
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Test command returns values supported as a compound value. 
Defined values 

<mode>: integer type 

disables reporting 

1 enables reporting 
<serv>: 

ASYNC asynchronous transparent 

SYNC synchronous transparent 

REL ASYNC asynchronous non-transparent 

REL SYNC synchronous non-transparent 

GPRS [<L2P>] GPRS 

<L2P> proposes a layer 2 protocol to use between the MT and the TE. It is defined in the Enter GPRS Data Mode 
(+CGDATA) command. 

Implementation 

Mandatory when data calls implemented. 

6.1 Extended error report +CEER 

Table 17: +CEER action command syntax 



Command 


Possible response(s) 


+ CEER 


+CEER: <report> 


+CEER=? 





Description 

Execution command causes the TA to return one or more hues of information text < report >, determined by the MT 
manufacturer, which should offer the user of the TA an extended report of the reason for 

- the failure in the last unsuccessful call setup (originating or answering) or in-call modification; 

- the last call release; 

- the last unsuccessful GPRS attach or unsuccessful PDP context activation; 

- the last GPRS detach or PDP context deactivation. 

Typically, the text will consist of a single line containing the cause information given by GSM/UMTS network in 
textual format. 

Defined values 

< report >: the total number of characters, including line terminators, in the information text shall not exceed 2041 

characters. 

Text shall not contain the sequence 0<CR> or OK<CR>. 

Implementation 

Optional. 
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6.1 1 Cellular result codes +CRC 

Table 18: +CRC parameter command syntax 



Command 


Possible response(s) 


+CRC= [<niode>] 




+CRC? 


+CRC: <mode> 


+CRC=? 


+CRC : {list of supported <niode>s) 



Description 

Set command controls whether or not the extended format of incoming call indication or GPRS network request for 
PDF context activation or notification for VBS/VGCS calls is used. When enabled, an incoming call is indicated to the 
TE with unsolicited result code +CRING : <type> instead of the normal RING. 

Test command returns values supported as a compound value. 

NOTE: Similar command may be found in TIA lS-99 [15] and TIA IS- 135 [16]. 

Defined values 

<mode>: integer type 

disables extended format 

1 enables extended format 
<type>: 

ASYNC [ , <priority> [ , <subaddr>, <satype>] ] 
SYNC [ , <priority> [ , <subaddr>, <satype>] ] 
REL ASYNC [ , <priority> [ , <subaddr> , <satype>] ] 
REL SYNC [, <priority> [, <subaddr>, <satype>] ] 
FAX [ , <priority> [ , <subaddr> , <satype>] ] 
VOICE [, <priority> [, <subaddr>, <satype>] ] 
VOICE/XXX [ , <priority> [ , <subaddr>, <satype>] ] 



asynchronous transparent 
synchronous transparent 
asynchronous non-transparent 
synchronous non-transparent 
facsimile (TS 62) 
normal voice (TS 11) 



ALT VOICE/XXX [ , <priority> [ , <subaddr> , <satype>] ] 
ALT XXX/VOICE [ , <priority> [ , <subaddr> , <satype>] ] 
ALT VOICE/FAX [ , <priority> [ , <subaddr> , <satype>] ] 
ALT FAX/VOICE [ , <priority> [ , <subaddr > , <satype>] ] 
GPRS <PDP_type>, <PDP_addr>[, [<L2P>] [ , <APN>] ] 

VGC <GCA>, <GId>, <ackflag> [ , <priority>] 
VBC <GCA>, <GId>, <ackflag> [ , <priority>] 



voice followed by data (BS 81) (XXX is 
ASYNC, SYNC, REL ASYNC or REL 
SYNC) 

alternating voice/data, voice first (BS 61) 
alternating voice/data, data first (BS 61) 

alternating voice/fax, voice first (TS 61) 
alternating voice/fax, fax first (TS 61) 

GPRS network request for PDP context 

activation 

voice group call (TS 91) 
voice broadcast call (TS 92) 



<priority> indicates the eMLPP priority level of the incoming call by paging, notification or setup message. The 
priority level values are as defined in eMLPP specification 3GPP TS 22.067 [54]. 



csubaddr>: string type subaddress of format specified by <satype; 
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<satype>: type of subaddress octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.8) 

<PDP_type>, <PDP_addr> and <APN> are as defined in the Define PDP Context (+CGDCONT) command. <L2P> 
proposes a layer 2 protocol to use between the MT and the TE. It is defined in the Enter GPRS Data Mode (+CGDATA) 
command. If the MT is unable to announce to the TE the network's request (for example it is in V.250 online data state) 
the MT shall reject the request. No corresponding unsolicited result code shall be issued when the MT returns to a 
command state. 

<GCA> is a part of the group call reference as specified in 3GPP TS 23.003 [7] and indicates group call area. 

<GId> is a part of the group call reference as specified in 3GPP TS 23.003 [7] and indicates group call 
identification.The <ackf lag>=l proposes that a predefined confirmation procedure is to be used after the call is 
ended. For <ackf lag>=0 no confirmation procedure is required. 

Imple mentation 

Mandatory when data or fax circuit mode calls are implemented, or for an MT supporting AT conomands only and 
eMLPP or VGCS or VBS is implemented. 

6.12 HSCSD device parameters +CHSD 



Table 19: +CHSD action command syntax 



Command 


Possible response(s) 


+ CHSD 


+CHSD : <mclass> , <maxRx> , <maxTx> , <sum> , <codings> 
+CME ERROR: <err> 


+CHSD=? 





Description 

Execution command returns information about HSCSD features (refer 3GPP TS 22.034 [29]) supported by the MT/TA. 
Refer subclause 9.2 for possible <err> values. 

The return information is only applicable in GERAN. 

Defined values 

<mclass>: integer type; multislot class 

<maxRx>: integer type; maximum number of receive timeslots that MT can use 
<maxTx>: integer type; maximum number of transmit timeslots that MT can use 

<sum>: integer type; total number of receive and transmit timeslots that MT can use at the same time (per TDMA 
frame). The following applies in a HSCSD call: 1 < (receive slots) + (transmit slots) < <suin> 

<codings> is a sum of integers each representing a supported channel coding (e.g. value 5 indicates that 4,8k and 
9,6k channel codings are supported): 

1 4,8k full rate data traffic channel 

4 9,6k full rate data traffic channel 

8 14,4k fuU rate data traffic channel 

16 28,8k full rate data traffic channel (only possible when 14.4k is supported) 
32 32,0k full rate data traffic channel (only possible in a two-timeslot configuration) 
64 43,2k full rate data traffic channel (only possible when 14.4k is supported) 
Implementation 
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Mandatory when HSCSD implemented. 

This command is not applicable to UTRAN or E-UTRAN UEs. 

6.13 HSCSD transparent call configuration +CHST 



Table 20: +CHST parameter command syntax 



Command 


Possible response(s) 


+CHST= [<wRx> [ , <codings>] ] 




+CHST? 


+CHST: <wRx> ,< codings > 


+CHST=? 





Description 

Set command controls parameters for transparent HSCSD calls in GERAN. Changing them during a call does not affect 
the current call. 

NOTE: In UTRAN or E-UTRAN, values set with this command are not needed. The only applicable parameter is 
<SPEED>, which is set with +CBST command. 

Defined values 

<wRx>: integer type; wanted amount of receive timeslots. Default value indicates that TA shall calculate a proper 
value from currently selected fixed network user rate (<speed> subparameter from +CBST command) and 
< codings > 

< codings >: a sum of integers each representing a channel coding that is accepted for transparent HSCSD calls. 
Default value indicates that all supported codings are accepted (refer +CHSD command for other values) 

Implementation 

Mandatory when transparent HSCSD implemented. 

This conmiand is not applicable to UTRAN or E-UTRAN UEs. 

6.14 HSCSD non-transparent call configuration +CHSN 



Table 21 : +CHSN parameter command syntax 



Command 


Possible response(s) 


+CHSN= [<wAiur> [ , <wRx> [ , <topRx> 
[ , <codings>] ] ] ] 




+CHSN? 


+CHSN: <wAiur>, <wRx>, <topRx>, <codings> 


+CHSN=? 


+CHSN : (list of supported <wAiur>s) , (Ust of supported 
<wRx>s) , (list of supported <topRx>s) , (list of 
supported < codings >s) 



Description 

Set cormnand controls parameters for originating non-transparent HSCSD calls. Values may also be used during mobile 
terminated data call setup. In GERAN, changing <topRx> or <codings> value during a call does not affect the 
current call. In GERAN, changing of <wAiur> or <wRx> affects the current call only if <topRx> was non-zero when 
call was established. 

Defined values 
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<wAiur >: integer type; wanted air interface user rate. Default value indicates that TA shall calculate a proper 
value from currently selected fixed network user rate (<speed> subparameter from +CBST command), 
< codings >, and <wRx> (or <inaxRx> from +CHSD command if <wRx>=0). Other values: 



1 


9600 bps 


2 


14400 bps 


3 


19200 bps 


4 


28800 bps 


5 


38400 bps 


6 


43200 bps 


7 


57600 bps 



<wRx>: integer type; wanted amount of receive timeslots. Default value indicates that TA shall calculate a proper 
value from currently selected <wAiur> and <codings>. This parameter is not applicable to UTRAN or E- 
UTRAN UEs. 

<topRx>: integer type; top value for <wRx> that user is going to request during the next established non- 
transparent HSCSD call. Default value indicates that user is not going to change <wAiur>/<wRx> during the 
next call. This parameter is not applicable to UTRAN or E-UTRAN UEs. 

< codings >: a sum of integers each representing a channel coding that is accepted for non-transparent HSCSD 
calls. Default value indicates that all supported codings are accepted (refer +CHSD command for other values). 
This parameter is not appUcable to UTRAN or E-UTRAN UEs. 

Implementation 

Mandatory when non-transparent HSCSD implemented. 



6.15 HSCSD current call parameters +CHSC 



Table 22: +CHSC action command syntax 



Command 


Possible response(s) 


+CHSC 


+CHSC: <rx> , <tx> , <aiur> , <coding> 


+CHSC=? 





Description 

Execution command returns information about current HSCSD call. If no HSCSD call is active, all parameters returned 
shall equal zero. If HSCSD call is active in UTRAN or E-UTRAN, all non-applicable parameters returned shall be 
equal to zero. (It is manufacturer specific whether non-zero information is returned in case of an active normal single- 
slot data call.) 

Defined values 

<rx>: integer type; number of receive timeslots currently in use. This parameter is not applicable in UTRAN or E- 
UTRAN. 

< tx>: integer type; number of transmit timeslots currently in use. This parameter is not applicable in UTRAN or E- 
UTRAN. 

<aiur >: integer type; current air interface user rate (in case of transparent service this equals fixed network user 
rate) (refer +CHSN command for possible values). For the two-timeslot ECSD bit transparent configuration the 
following additional values apply: 

8 56000 bps 
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9 64000 bps 

<coding>: current channel coding (refer +CHSD command for possible values). This parameter is not applicable 
in UTRAN or E-UTRAN. 

Implementation 

Optional. 

6.16 HSCSD parameters report +CHSR 



Table 23: +CHSR parameter command syntax 



Command 


Possible response(s) 


+CHSR= [<mode>] 




+CHSR? 


+CHSR: <mode> 


+CHSR=? 


+CHSR : (list of supported <mode>s) 



Description 

Enabled command returns intermediate result code +CHSR : < type > from the TA to the TE when an HSCSD call is 
being set up. The result code represents the current (negotiated or renegotiated) HSCSD parameters. If enabled, the 
intermediate result code is transmitted at the point of the call setup negotiation where the TA has determined what type 
of an HSCSD connection will be used. Result code transmission is done after possible service (+CR), error control 
(+ER), and/or compression (+DR) reporting but before possible TE-TA rate (+ILRR) reporting and before the 
intermediate result code CONNECT is transmitted. The format of the intermediate result code is: 

+CHSR: <rx> , <tx> , <aiur> , <coding> 

For the value definitions, refer to +CHSN and +CHSC commands. For instance, for a non-transparent HSCSD call, result 
code '+CHSR : 2,2,4,8' means that the call has two timeslots in both up- and downlink, the air interface user rate is 
28800 bps, and the used channel coding TCH/F14.4. 

In UTRAN or E-UTRAN, all non-appUcable parameters returned shall be equal to zero. 
Read connmand returns the current value of <mode>. 
Test command returns the values supported by the UE. 
Defined values 

<mode>: integer type 

disables reporting 

1 enables reporting 
Implementation 

Mandatory when HSCSD implemented 

6.17 HSCSD automatic user initiated upgrading +CHSU 



Table 24: +CHSU parameter command syntax 



Command 


Possible response(s) 


+CHSU=<mode> 




+CHSU? 


+CHSU: <mode> 


+CHSU=? 


+CHSU: (list of supported <mode>s) 
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Description 

Set command controls whether or not automatic user initiated service level upgrading shall be used for non-transparent 
HSCSD calls. "Automatic" means that, if enabled, the ME/TA shall use the UP bit in the received RLP frames to 
determine when to initiate user initiated service level upgrading (i.e. when to modify the +CHSN parameters <wAiur> 
and/or <wRx> for the current call). Refer to 3GPP TS 27.001 [41] for details on the interpretation of the UP bit(s). 

NOTE 1: The validity of the UP bit in the RLP frames depends on the result of the RLP negotiations. The UP bit 
shall only be used if the result of the RLP negotiations were successful with respect to the UP bit. 

NOTE 2: This connmand is only applicable in GERAN. 

Defined values 

<mode>: integer type 

disables use of UP bit for upgrading 

1 enables use of UP bit for upgrading 
Implementation 

Optional 

This command is not applicable to UTRAN or E-UTRAN UEs. 

6.18 HSCSD non-transparent asymmetry configuration +CHSA 



Table 25: +CHSA parameter command syntax 



Command 


Possible response(s) 


+CHSA=<mode> 




+CHSA? 


+CHSA: <mode> 


+CHSA=? 


+CHSA: (list of supported <mode>s) 



Description 

Set command controls the preferred asymmetry bias for non-transparent ECSD calls. Downlink biased asymmetry 
means that 8-PSK modulation is preferred downlink and OMSK modulation uplink. Uplink based asymmetry means 
that 8-PSK modulation is preferred uplink and GMSK downlink. Changing of <mode> affects the current call only if 
<topRx> (refer +CHSN) was non-zero when call was established. 

Test command returns values supported by the MT/TA as compound values. The <mode> subparameter range 
indirectly indicates the UE Type; range (0-1) indicates UE Type A and range (0-2) indicates UE Type B. 

NOTE 1: ECSD is also controlled by +CHSD, +CHSN and +CHST. 

NOTE 2: This command is only applicable in GERAN. 

Defined values 

<mode>: integer type 

No preference 

1 Downlink biased asymmetry 

2 Uplink biased asynometry 
Implementation 

Mandatory when non-transparent ECSD is implemented. 

This connmand is not applicable to UTRAN or E-UTRAN UEs. 
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6.19 Single numbering scheme +CSNS 



Table 26: +CSNS parameter command syntax 



Command 


Possible response(s) 


+CSNS= [<niode>] 




+CSNS? 


+CSNS: <niode> 


+CSNS=? 


+CSNS : (list of supported <mode>s) 



Description 

Set command selects the bearer or teleservice to be used when mobile terminated single numbering scheme call is 
established. Parameter values set with +CBST command shall be used when <mode> equals to a data service. 

Test command returns values supported as compound values. 

Defined values 

<mode>: integer type 

voice 

1 alternating voice/fax, voice first (TS 61) 

2 fax(TS62) 

3 alternating voice/data, voice first (BS 61) 

4 data 

5 alternating voice/fax, fax first (TS 61) 

6 alternating voice/data, data first (BS 61) 

7 voice followed by data (BS 81) 
Implementation 

Optional. 

6.20 Voice Hangup Control +CVHU 



Table 27: +CVHU parameter command syntax 



Command 


Possible response(s) 


+CVHU= [<mode>] 




+CVHU? 


+CVHU: <mode> 


+CVHU=? 


+CVHU : (list of supported <niode >s ) 



Description 

Set command selects whether ATH or "drop DTR" shall cause a voice connection to be disconnected or not. By voice 
connection is also meant alternating mode calls that are currently in voice mode. (See subclause 6.6). 

NOTE: When <mode> = 2, this command must be seen in conjunction with the 

ITU-T Recommendation V.250 [14] command &D. Else &D shall be ignored. 

Defined values 

<mode>: integer type 
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"Drop DTR" ignored but OK response given. ATH disconnects. 

1 "Drop DTR" and ATH ignored but OK response given. 

2 "Drop DTR" behaviour according to &D setting. ATH disconnects. 
Implementation 

Optional 

6.21 CCITT V.120 [36] rate adaption protocol +CV120 



Table 28: +CV120 parameter command syntax 



Command 


Possible response(s) 


+CV12 0= [<rah> [ , <mf m> [ , <mo 
de> [ , <llineg> [ , <assign> [ , 
<negtype>] ] ] ] ] ] 




+CV12 0? 


+CV12 : <rah> , <mf m> , <mod.e> , <llineg> , < as sign 
> , <negtype> 


+CV120=? 


+CV120: {list of supported <rah>s) , (list of supported 
<mfm>s) , (list of supported <mode>s) , (list of supported 
<llineg>s) , (list of supported <assign>s) , (list of 
supported <negtype>s) 



Description 

Set command sets the values of the V. 120 protocol parameters (defined in CCITT Recommendation V.120 [36]) that 
are carried in the GSM BC and/or LLC information elements. 

Read command returns current settings for the V. 120 parameters. 

Test command returns values supported as a compound value. 

Defined values 

<rah>: integer type 

rate adaption header not included 

1 rate adaption header included (mandatory for protocol sensitive modes). 
<mf m>: integer type 

multiple frame establishment not supported, only UI frames allowed 

1 multiple frame establishment supported, both I and UI frames allowed. 
<mode>: integer type 

bit transparent mode of operation 

1 protocol sensitive mode of operation. 
<llineg>: integer type 

no negotiation, LLI = 256 only 

1 negotiation allowed. 

NOTE: <negtype > indicates the connection over which the negotiation is performed. 
<assign>: integer type 
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message originator is "default assignee" 

1 message originator is "assignor only". 
<negtype>: integer type 

negotiation is done using logical link zero 

1 negotiation is done with USER INFORMATION messages on a temporary signalling connection. 

GSM/UMTS does not support all the possible modes of V. 120 operation. However, in order to accommodate possible 
future additions, the complete set of parameters is included in the conamand. 

The permitted values are: 1, 1 or 0, 1, 0, 0, 0. 

A recommended set of default values is: 1, 1, 1, 0, 0, 0. 

Implementation 

Mandatory, if the MT supports V.120 interworking. 

6.22 Settings date format +CSDF 



Table 29: +CSDF parameter command syntax 



Command 


Possible response(s) 


+CSDF= [ [<mode>] [,<auxmode>] ] 


+CME ERROR: <err> 


+CSDF? 


+CSDF: <mod.e> [ , <auxmod.e>] 
+CME ERROR: <err> 


+CSDF=? 


+CSDF : (list of supported <mode>s) 
[ , (list of supported <auxmode>s) ] 

+CME ERROR: <err> 



Description 

This command sets the date format via MMl of the date information presented to the user, which is specified by use of 
the <mode> parameter. The <mode> affects the date format on the phone display and doesn't affect the date format of 
the AT command serial interface. The command also sets the date format of the TE-TA interface, which is specified by 
use of the <auxmode> parameter (e.g. the <auxmode> affects the <time> of +CCLK and +CALA). If the parameter is 
omitted (" + CSDF=","+CSDF=<mode>","+CSDF= , <auxmode>"),then this sets the default value. 

Defined values 

<mode>: integer type 

NOTE 1: It is manufacturer specific which modes that are supported. 

1 DD-MMM-YYYY 

NOTE 2: Presentation of MMM is language dependent. 

2 DD-MM-YY 

3 MM/DD/YY 

4 DD/MM/YY 

5 DD.MM.YY 

6 YYMMDD 
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7 YY-MM-DD 

8-255 Manufacturer specific 

<auxmode>: integer type 

1 yy/MM/dd 

2 yyyy/MM/dd 

all other values are reserved by the present document 

NOTE 3: The <time> format of +CCLK and +CALA "yy/MM/dd,hh:mm:ss±zz" when <auxmode>=l and it is 
"yyyy/MM/dd,lih:mm:ss+zz" when <auxmode>=2. If the MT does not support time zone information 
then the three last characters may be omitted (see +CCLK command). 

Implementation 

Optional 

6.23 Silence Command +CSIL 



Table 30: +CSiL parameter command syntax 



Command 


Possible response(s) 


+CSIL= [<mode>] 


+CME ERROR: <err> 


+CSIL? 


+CSIL: <mode> 
+CME ERROR: <err> 


+CSIL=? 


+CS IL : (list of supported <inode >s ) 
+CME ERROR: <err> 



Description 

Set command enables/disables the silent mode. When the phone is in silent mode, all sounds from MT are suppressed 
except voice. 

Read command reads the current setting. 
Test command lists the supported modes. 
Defined values 

<mode>: integer type 

Silent mode off 

1 Silent mode on 
Implementation 
Optional 

6.24 Settings time format +CSTF 



Table 31 : +CSTF parameter command syntax 



Command 


Possible response(s) 


+CSTF= [<mode>] 


+CME ERROR: <err> 
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+CME ERROR: <err> 


+CSTF=? 


+CSTF : (list of supported <niode>s) 
+CME ERROR: <err> 



Description 

Set command sets the time format of the time information presented to the user. 
Read command reads the ciurent setting. 
Test command reads the supported <modes>s. 
Defined values 

<mode>: integer type 

1 HH:MM (24 hour clock) 

2 HH:MM a.m./p.m. 
3-7 Manufacturer specific 

Imple mentation 
Optional 
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6.25 ITU-T Recommendation V.250 [14] call control commands 



Table 32: V.250 call control commands 



Command 


Subclause 


Impl. 


Use In GSM/UMTS 


D[<dial strin 

g>] [;] 


6.3.1 


mand. 


originates a call 


T 


6.3.2 


nitind. 


i<Tn(iri^H (''si^li^rl Irini^ (]i;illinol 

1 ^ lH-^lv^d \^k/>V'lV'V-'L LWllV' did 11111 ^ J 


p 


6.3.3 


mand. 


ignored (select pulse dialling) 


A 


A ^ ^ 
O.J.J 


mand. 


answer a call 


H [<value>] 


6.3.6 


mand. 


hang-up a single mode call; for alternate mode call refer subclause 

"T-T!ino"iiT\ pilll -l-f"'!— TT TP" frwAv (^(Hiinl fr\ 'jf^vn nf^f^Hf^H'^ 
n.tiiigLi|j i^dii T 1 1 vj r ^^L/iiiy vdiLic cuLiai ixj Z/Ciu iiccucu^ 


[<value>] 


6.3.7 


mand. 


returns TA to online data state from ordine command mode (only value 




^ 8 


-7- 

m^inci. 


answering the call; value equalUng zero disables automatic answering 
and is the default 


S6= [<value>] 


6.3.9 


mand. 


ignored (pause before blind dialling) 


S7= [<value>] 


6.3.10 


mand. 


sets number of seconds to wait for completion of call answering or 
originating procedure before giving up and disconnecting 


S8= [<value>] 


6.3.11 


mand. 


sets number of seconds to wait when comma dial modifier encountered 
in dial string of D command (default is 2 seconds) 


S10= [<value>] 


6.3.12 


mand. 


sets number of tenths of seconds to wait before disconnecting after TA 
has indicated the absence of received Une signal 


L [<value>] 


6.3.13 


mand. 


ignored (monitor speaker loudness) 


M [<value>] 


6.3.14 


mand. 


ignored (monitor speaker mode) 



Implementation of commands marked as mandatory is mandatory only if call control functionaUty is supported. 

6.26 ITU-T Recommendation V.250 [14] data compression 
commands 

Table 33: V.250 data compression commands 



Command 


Subclause 


impl. 


Use In GSiUI/UMTS 


+DS= [<dir> [ , <neg> [ 
,<P1> [,<P2>] ] ] ] 


6.6.1 


mand. 
when 
V.42bis 


controls ITU-T Recommendation V.42bis data compression 
functions; for subparameter defaults in GSM/UMTS refer 
3GPPTS 24.022 [18] 


+DR= [<value>] 


6.6.2 


mand. 
when 
V.42bis 


determines whether the use of V.42bis is informed using 
intermediate result code +DR : < type > before going 
online data state after call answering or originating 



6.27 Initiate eCall +CECALL 

Table 6.27-1 : +CECALL parameter command syntax 



Command 


Possible response 


+CECALL=<type of eCall> 




+CECALL? 


+CECALL: [ < type_of _eCal 1 >] 


+CECALL=? 


+CECALL : (Ust of supported <type_of_eCall>s) 



Description 
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Set command is used to trigger an eCall to the network. Based on the configuration selected, it can be used to either 
trigger a test call, a reconfiguration call, a manually initiated eCall or an automatically initiated eCall. 

Read command returns the type of eCall that is currently in progress, if any. 

Test command returns the supported values and ranges. 

Defined values 

<type_of_eCall>: integer type 

test call 

1 reconfiguration call eCall 

2 manually initiated eCall 

3 automatically initated eCall 
Implementation 

Optional. 

6.28 Informative examples 

The alternating mode call handling (voice and fax, or voice and data) and the data call setup coiimiands are defined such 
that the dialUng command of ITU-T Recommendation V.250 [14] (D) still always originates a call. The purpose is to 
support all current TE applications using the dialling command as default. Fax calls are controlled following the rules of 
ITU-T Reconmiendation T.31 [11] and ITU-T Reconamendation T.32 [12] standards. 

An example where a voice call is originated: 

ATD+l 812 5556731; (type of address defaults to 145, CLI presentation is restricted for this call) 
OK (call setup was successful) 

An example where a voice call is attempted from a phonebook: 

ATD>"Doe Joe"G; (enable CUG control for this call) 
+CME ERROR : 22 (entry "Doe Joe" is not found) 

Also supplementary services may be controlled using dial cormnand according to 3GPP TS 22.030 [19]. An example of 
call forwarding on no reply for telephony with the adjustment of the no reply condition timer on 25 seconds: 

ATD**61*+1812555673*11*2 5# 

OK (modification was successful) 

Two new commands are created for controlling the alternating mode calls. First one, Call Mode (+CMOD), selects 
between single and alternating mode. Because this is a crucial command, it is defined that the value is set back to 
zero (single mode) after every successfully originated alternating mode call. Also on power-up and factory or user 
resets, the value is set to zero. The second new command. Hangup Call (+CHUP), is not a replacement of 
ITU-T Recommendation V.250 [14] command H, but a command which reliably disconnects the call in GSM/UMTS 
network. This is defined because the H command is used to switch from fax or data mode to voice mode. 

The setting of GSM/UMTS bearer service (data circuit duplex asynchronous and synchronous, PAD access circuit 
asynchronous, or data packet duplex synchronous), is done with Select Bearer Service Type (+CBST). It chooses one of 
the four mentioned bearer services, the data rate of the service (or actually the modulation when modem IWFs are 
used), and enables or disables RLP. Command Radio Link Protocol (+CRLP) is used to set the RLP parameters in the 
radio path. 

Service Reporting Control command (+CR) is defined similarly as the reporting of modulation, V.18, error control, and 
data compression which are ITU-T Recommendation V.250 [14] features used to show information about the type of 
the estabhshed connection before the CONNECT intermediate result code. +CR command has one subparameter which 
specifies whether the intermediate result code +CR : < serv> is returned or not. The result code should be returned 
before any ITU-T Recommendation V.250 [14] reporting result codes. An example of setting up an asynchronous 
9600 bit/s modem connection with service reporting: 
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AT+CBST=7 , , 1 (asynchronous modem 9600 bit/s and RLP) 
OK 

AT+ CR= 1 (enable reporting) 

OK 

ATD1234567890 
+CR: REL ASYNC 
CONNECT 9600 

As GSM/UMTS network offers more information about the reason of the failure in call originating and answering than 
normal PSTN, it is useful to add an extra command to return this information to the TE. This information should not be 
returned always after unsuccessful call originating or answering, because many TE applications look for just the regular 
NO CARRIER, BUSY, NO ANSWER and CONNECT messages. Action command Extended Error Report (+CEER) does 
not have any subparameters, and it returns the cause of the latest call setup failure. This information may be the textual 
presentation of the GSM/UMTS network failure code (refer 3GPP TS 24.008 [8] Annex H), or some other information 
defined by the TA manufacturer. 



7 Network service related commands 

7.0 General 

This clause describes GSM/UMTS network related commands, which are not covered in call control clause of the 
present document. Commands include GSM/UMTS supplementary service handling, MSISDN query, MT and network 
facility locking, and network registration information query. 

7.1 Subscriber number +CNUM 



Table 34: +CNUM action command syntax 



Command 


Possible response(s) 


+CNUM 


+CNUM : [<alphal>] , <numberl> , <typel> [ , <speed> , <service> [ , <itc>] ] 
[<CR><LF>+CNUM : [<alpha2>] , <number2 > , <type2 > [ , <speed> , <service> 
[, <itc>] ] 
[...]] 

+CME ERROR: <err> 


+CNUM=? 





Description 

Action command returns the MSISDNs related to the subscriber (this information can be stored in the SIM/UICC or in 
the MT). When storing information in the SIM/UICC, if the currently selected card slot contains a SIM card or a UICC 
with an active GSM application, the information is stored in the EFmsisdn under DFxeiecom- If the currently selected card 
slot contains a UICC with an active USIM application, the information is stored in the EFmsisdn under ADFusim)- If 
subscriber has different MSISDN for different services, each MSISDN is returned in a separate Une. Refer 
subclause 9.2 for possible <err> values. 

Defined values 

<alphax>: optional alphanumeric string associated with <numberx>; used character set should be the one 
selected with command Select TE Character Set +CSCS 

<numberx>: string type phone number of format specified by <typex> 

<typex>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 

<speed>: as defined in subclause 6.7 

<service>: integer type (service related to the phone number) 
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asynchronous modem 

1 synchronous modem 

2 PAD Access (asynchronous) 

3 Packet Access (synchronous) 

4 voice 

5 fax 

all other values below 128 are reserved by the present document 
<itc>: integer type (information transfer capabiUty) 

3,1kHz 

1 UDI 
Implementation 
Optional. 

7.2 Network registration +CREG 



Table 35: +CREG parameter command syntax 



Command 


Possible response(s) 


+CREG= [<n>] 


+CME ERROR: <err> 


+CREG? 


+CREG: <n>, <stat> [, <lac>, <ci> [, <AcT>] ] 


+CREG=? 


+CREG : (Ust of supported <n>s) 



Description 

Set command controls the presentation of an unsolicited result code +CREG : <stat> when <n>=l and there is a 
change in the MT"s circuit mode network registration status in GERAN/UTRAN/E-UTRAN, or unsolicited result code 
+CREG : <stat>[,<lac>,<ci>[, <AcT>] ] when <n>=2 and there is a change of the network cell in 
GERAN/UTRAN/E-UTRAN; in this latest case <AcT>, <lac> and <ci> are sent only if available. 

NOTE 1: If the MT also supports GPRS services and/or EPS services, the +CGREG command and +CGREG : result 
codes and/or the +CEREG command and +CEREG : result codes apply to the registration status and 
location information for those services. 

Read command returns the status of result code presentation and an integer <stat> which shows whether the network 
has currently indicated the registration of the MT. Location information elements <lac>, <ci> and <AcT>, if 
available, are returned only when <n>=2 and MT is registered in the network. Refer subclause 9.2 for possible <err> 
values. 

Defined values 

<n>: integer type 

disable network registration unsolicited result code 

1 enable network registration unsolicited result code +CREG: <stat> 

2 enable network registration and location information unsohcited result code 
+CREG: <stat> [, <lac>, <ci> [, <AcT>] ] 

<stat>: integer type; circuit mode registration status 

not registered, MT is not currently searching a new operator to register to 
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1 registered, home network 

2 not registered, but MT is currently searching a new operator to register to 

3 registration denied 

4 unknown (e.g. out of GERAN/UTRAN/E-UTRAN coverage) 

5 registered, roaming 

6 registered for "SMS only", home network (applicable only when <AcT> indicates E-UTRAN) 

7 registered for "SMS only", roaming (applicable only when <AcT> indicates E-UTRAN) 

8 attached for emergency bearer services only (see NOTE 2) (not apphcable) 

NOTE 2: 3GPP TS 24.008 [8] and 3GPP TS 24.301 [83] specify the condition when the MS is considered as 
attached for emergency bearer services. 

<lac>: string type; two byte location area code (when <AcT> indicates value to 6), or tracking area code (when 
<AcT> indicates value 7). In hexadecimal format (e.g. "00C3" equals 195 in decimal). 

<ci>: string type; four byte GERAN/UTRAN/E-UTRAN cell ID in hexadecimal format. 

<AcT>: integer type; access technology of the serving cell 






GSM 


1 


GSM Compact 


2 


UTRAN 


3 


GSM w/EGPRS (see NOTE 3) 


4 


UTRAN w/HSDPA (see NOTE 4) 


5 


UTRAN w/HSUPA (see NOTE 4) 


6 


UTRAN w/HSDPA and HSUPA (see NOTE 4) 


7 


E-UTRAN 



NOTE 3: 3GPP TS 44.060 [71] specifies the System Information messages which give the information about 
whether the serving cell supports EGPRS. 

NOTE 4: 3GPP TS 25.33 1 [74] specifies the System Information blocks which give the information about whether 
the serving cell supports HSDPA or HSUPA. 

Implementation 

Optional. 
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7.3 PLMN selection +COPS 



Table 36: +COPS parameter command syntax 



Command 


Possible response(s) 


+COPS= [<niode> [ , <f orinat> 
[, <oper> [, <AcT>] ] ] ] 


+CME ERROR: <err> 


+COPS? 


+COPS : <mod.e> [ , <f ormat> , <oper> [ , <AcT>] ] 
+CME ERROR: <err> 


+COPS=? 


+ COPS : [list of supported ( < stat > , long alphanumeric <oper> , short 
alphanumeric <oper> , numeric <oper> [ , <AcT>] ) s] [ , , (list of 
supported <mode>s) , (Ustof supported < format >s) ] 

+CME ERROR: <err> 



Description 

Set command forces an attempt to select and register the GSM/UMTS/EPS network operator using the SIM/USIM card 
installed in the currently selected card slot. <mode> is used to select whether the selection is done automatically by the 
MT or is forced by this command to operator <oper> (it shall be given in format <f ormat>) to a certain access 
technology, indicated in <AcT>. If the selected operator is not available, no other operator shall be selected (except 
<mode>=4). If the selected access technology is not available, then the same operator shall be selected in other access 
technology. The selected operator name format shall apply to further read commands (+COPS?) also. <mode>=2 
forces an attempt to deregister from the network. The selected mode affects to all further network registration (e.g. after 
<mode>=2, MT shall be unregistered until <niode>=0 or 1 is selected). Refer subclause 9.2 for possible <err> 
values. This command should be abortable when registration/deregistration attempt is made. 

Read command returns the current mode, the currently selected operator and the current Access Technology. If no 
operator is selected, < format >, <oper> and <AcT> are omitted. 

Test command returns a set of five parameters, each representing an operator present in the network. A set consists of 
an integer indicating the availability of the operator <stat>, long and short alphanumeric format of the name of the 
operator, numeric format representation of the operator and access technology. Any of the formats may be unavailable 
and should then be an empty field. The list of operators shall be in order: home network, networks referenced in SIM or 
active application in the UICC (GSM or USIM) in the following order: HPLMN selector. User controlled PLMN 
selector. Operator controlled PLMN selector and PLMN selector (in the SIM or GSM application), and other networks. 

It is reconunended (although optional) that after the operator Ust TA returns Usts of supported <mode>s and 
< format >s. These lists shall be delimited from the operator list by two commas. 

The access technology selected parameters, <AcT>, should only be used in terminals capable to register to more than 
one access technology. Selection of <AcT> does not limit the capability to cell reselections, even though an attempt is 
made to select an access technology, the phone may still re-select a cell in another access technology. 

Defined values 

<mode>: integer type 

automatic (<oper> field is ignored) 

1 manual (<oper> field shall be present, and <AcT> optionally) 

2 deregister from network 

3 set only < format > (for read command +COPS ?), do not attempt registration/deregistration (<oper > and 
<AcT> fields are ignored); this value is not applicable in read command response 

4 manual/automatic (<oper> field shall be present); if manual selection fails, automatic mode (<mode>=0) is 
entered 
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< format >: integer type 

long format alphanumeric < ope r> 

1 short format alphanumeric < ope r> 

2 numeric <oper> 

< oper >: string type; < format > indicates if the format is alphanumeric or numeric; long alphanumeric format can 

be upto 16 characters long and short format up to 8 characters (refer GSM MoU SE.13 [9]); numeric format is 
the GSM Location Area Identification number (refer 3GPP TS 24.008 [8] subclause 10.5.1.3) which consists of a 
three BCD digit country code coded as in ITU-T Recommendation E.212 [10] Annex A, plus a two BCD digit 
network code, which is administration specific; returned <oper> shall not be in BCD format, but in IRA 
characters converted from BCD; hence the number has structure: (country code digit 3)(country code digit 
2)(country code digit l)(network code digit 3)(network code digit 2)(network code digit 1) 

< s t a t > : integer type 

unknown 

1 available 

2 current 

3 forbidden 



<AcT>: integer type; access technology selected 






GSM 


1 


GSM Compact 


2 


UTRAN 


3 


GSM w/EGPRS (see NOTE 1) 


4 


UTRAN w/HSDPA (see NOTE 2) 


5 


UTRAN w/HSUPA (see NOTE 2) 


6 


UTRAN w/HSDPA and HSUPA (see NOTE 2) 


7 


E-UTRAN 



NOTE 1: 3GPP TS 44.060 [71] specifies the System Information messages which give the information about 
whether the serving cell supports EGPRS. 

NOTE 2: 3GPP TS 25.331 [74] specifies the System Information blocks which give the information about whether 
the serving cell supports HSDPA or HSUPA. 

Implementation 

Optional. 
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7.4 Facility lock +CLCK 



Table 37: +CLCK action command syntax 



Command 


Possible response(s) 


+CLCK=<f ac> , <mode> [ , <passwd> [ 
, <class>] ] 


+CME ERROR: <err> 

when <mode>=2 and command successful: 

+CLCK: <status> [ , <classl> 
[<CR><LF>+CLCK: <status>, <class2> 
[...]] 


+CLCK=? 


+CLCK: (list of supported <fac>s) 
+CME ERROR: <err> 



Description 

Execute command is used to lock, unlock or interrogate a MT or a network facility <f ac>. Password is normally 
needed to do such actions. When querying the status of a network service (<mode>=2) the response line for 'not active' 
case (<status>=0) should be returned only if service is not active for any <class>. Refer subclause 9.2 for possible 
<err> values. This command should be abortable when network faciUties are set or interrogated. 

Call barring facilities are based on GSM/UMTS supplementary services (refer 3GPP TS 22.088 [6]). The interaction of 
these with other commands based on other GSM/UMTS supplementary services is described in the GSM/UMTS 

standard. 

Test command returns facihty values supported as a compound value. 
Defined values 

<f ac> values reserved by the present document: 

" CS " CNTRL (lock CoNTRoL surface (e.g. phone keyboard)) 

" PS " PH-SIM (lock PHone to SIM/UICC card installed in the currently selected card slot) (MT asks 

password when other than current SIM/UICC card inserted; MT may remember certain amount of 
previously used cards thus not requiring password when they are inserted) 

" PF " lock Phone to the very First inserted SIM/UICC card (also referred in the present document as PH- 
FSIM) (MT asks password when other than the first SIM/UICC card is inserted) 

" SC " SIM (lock SIM/UICC card installed in the currently selected card slot) (SIM/UICC asks password in 
MT power-up and when this lock command issued) 

"AO " BAOC (Ban- All Outgoing Calls) (refer 3GPP TS 22.088 [6] clause 1) 

" 01 " BOIC (Barr Outgoing International Calls) (refer 3GPP TS 22.088 [6] clause I) 

" OX " BOIC-exHC (Barr Outgoing International Calls except to Home Country) (refer 3GPP TS 22.088 [6] 

clause 1) 

" AI " BAIC (Barr All Incoming Calls) (refer 3GPP TS 22.088 [6] clause 2) 

" IR " BIC-Roam (Barr Incoming Calls when Roaming outside the home country) (refer 3GPP TS 22.088 [6] 

clause 2) 

" NT " barr incoming calls from numbers Not stored to TA memory 
" NM " barr incoming calls from numbers Not stored to MT memory 
" NS " barr incoming calls from numbers Not stored to SIM/UICC memory 
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" NA " ban incoming calls from numbers Not stored in Any memory 

"AB" All Barring services (refer 3GPP TS 22.030 [19]) (applicable only for <mode>=0) 

"AG" All outGoing barring services (refer 3GPP TS 22.030 [19]) (applicable only for <mode>=0) 

"AC" All incoming barring services (refer 3GPP TS 22.030 [19]) (applicable only for <mode>=0) 

" FD " SIM card or active application in the UICC (GSM or USIM) fixed dialling memory feature (if PIN2 
authentication has not been done during the current session, PIN2 is required as <passwd>) 

" PN " Network Personalization (refer 3GPP TS 22.022 [33]) 

" PU " network sUbset PersonaUzation (refer 3GPP TS 22.022 [33]) 

" PP " service Provider PersonaUzation (refer 3GPP TS 22.022 [33]) 

" PC " Corporate Personalization (refer 3GPP TS 22.022 [33]) 

<mode>: integer type 

unlock 

1 lock 

2 query status 
<status>: integer type 

not active 

1 active 

<passwd>: string type; shall be the same as password specified for the facility from the MT user interface or with 
command Change Password +CPWD 

<classx> is a sum of integers each representing a class of information (default 7 - voice, data and fax): 

1 voice (telephony) 

2 data (refers to all bearer services; with <mode >=2 this may refer only to some bearer service if TA 
does not support values 16, 32, 64 and 128) 

4 fax (facsimile services) 

8 short message service 

16 data circuit sync 

32 data circuit async 

64 dedicated packet access 

128 dedicated PAD access 

Implementation 

The call barring supplementary service control is mandatory for MT supporting AT commands only and not supporting 
the control through dial command D. 
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7.5 Change password +CPWD 



Table 38: +CPWD action command syntax 



Command 


Possible response(s) 


+CPWD=<fac>, <oldpwd>, <newpwd> 


+CME ERROR: <err> 


+CPWD=? 


+CPWD: list of supported {<f ac>, <pwdlength>) s 

+CME ERROR: <err> 



Description 

Action command sets a new password for the facility lock function defined by command Facility Lock +CLCK. Refer 
subclause 9.2 for possible <err> values. 

Test command returns a list of pairs which present the available facilities and the maximum length of their password. 
Defined values 

<f ac>: 

"P2" SIMPIN2 

refer Facility Lock +CLCK for other values 

<oldpwd>, <newpwd>: string type; <oldpwd> shall be the same as password specified for the facility from the 
MT user interface or with command Change Password +CPWD and <newpwd> is the new password; maximum 
length of password can be determined with <pwdlength> 

<pwdlength>: integer type maximum length of the password for the faciUty 

Implementation 

Optional. 

7.6 Calling line identification presentation +CLIP 



Table 39: +CLIP parameter command syntax 



Command 


Possible response(s) 


+CLIP= [<n>] 




+CLIP? 


+CLIP: <n>,<m> 


+CLIP=? 


+CLIP: (Ust of supported <n>s) 



Description 

This command refers to the GSM/UMTS supplementary service CLIP (Calling Line Identification Presentation) that 
enables a called subscriber to get the calling line identity (CLI) of the calling party when receiving a mobile terminated 
call. Set command enables or disables the presentation of the CLI at the TE. It has no effect on the execution of the 
supplementary service CLIP in the network. 

When the presentation of the CLI at the TE is enabled (and calling subscriber allows), unsolicited result code 
+CLIP: <nuinber> , <type> [ , <subaddr> , <satype> [ , [<alpha>] [,<CLI validity>] ] ] is returned 
after every RING (or +CRING : < type >; refer subclause "Cellular result codes +CRC") result code sent from TA to 
TE. It is manufacturer specific if this response is used when normal voice call is answered. 

Read command gives the status of <n>, and also triggers an interrogation of the provision status of the CLIP service 
according 3GPP TS 22.081 [3] (given in <m>).Test command returns values supported as a compound value. 

Defined values 
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<n>: integer type (parameter sets/shows the result code presentation status to the TE) 

disable 

1 enable 

<m>: integer type (parameter shows the subscriber CLIP service status in the network) 

CLIP not provisioned 

1 CLIP provisioned 

2 unknown (e.g. no network, etc.) 

<number>: string type phone number of format specified by < type > 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 
<subaddr>: string type subaddress of format specified by <satype> 

<satype>: type of subaddress octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.8) 

<alpha>: optional string type alphanumeric representation of <number> corresponding to the entry found in 
phonebook; used character set should be the one selected with command Select TE Character Set +CSCS 

<CLI validity>: integer type. This parameter can provide details why <number> does not contain a calling 
party BCD number (refer 3GPP TS 24.008 [8] subclause 10.5.4.30). 

CLI valid 

1 CLI has been withheld by the originator (refer 3GPP TS 24.008 [8] table 1 0.5 . 1 35a/3GPP TS 24.008 code 
"Reject by user") 

2 CLI is not available due to interworking problems or hmitations of originating network (refer 
3GPP TS 24.008 [8] table 10.5.135a/3GPP TS 24.008 code "Interaction with other service") 

3 CLI is not available due to calling party being of type payphone (refer 3GPP TS 24.008 [8] 
table 10.5.135ay3GPP TS 24.008 code "Coin line/payphone") 

4 CLI is not available due to other reasons (refer 3GPP TS 24.008 [8] table 10.5.135a/3GPP TS 24.008 code 
"Unavailable")When CLI is not available (<CLI validity>=2, <CLI validity>=3 or <CLI validity>=4), 
<number> shall be an empty string ("") and <type> value will not be significant. Nevertheless, TA may return the 
recommended value 128 for <type> ((TON/NPI unknown in accordance with 3GPP TS 24.008 [8] 
subclause 10.5.4.7). 

When CLI has been withheld by the originator, (<CLI validity>=l) and the CLIP is provisioned with the 
"override category" option (refer 3GPP TS 22.081 [3] and 3GPP TS 23.081 [40]), <number> and <type> is 
provided. Otherwise, TA shall return the same setting for <nuinber> and <type> as if the CLI was not available. 

Implementation 

Optional. 

7.7 Calling line identification restriction +CLIR 



Table 40: +CLIR parameter command syntax 



Command 


Possible response(s) 


+CLIR= [<n>] 




+CLIR? 


+CLIR : <n> , <m> 


+CLIR=? 


+CLIR : (list of supported <n>s) 



Description 
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This command refers to CLIR-service according to 3GPP TS 22.081 [3] that allows a calling subscriber to enable or 
disable the presentation of the CLl to the called party when originating a call. 

Set command overrides the CLIR subscription (default is restricted or allowed) when temporary mode is provisioned as 
a default adjustment for all following outgoing calls. This adjustment can be revoked by using the opposite command.. 
If this command is used by a subscriber without provision of CLIR in permanent mode the network will act according 
3GPPTS 22.081 [3]. 

Read command gives the default adjustment for all outgoing calls (given in <n>), and also triggers an interrogation of 
the provision status of the CLIR service (given in <m>). Test conmiand returns values supported as a compound value. 

NOTE: On a per call base CLIR functionahty is explained in subclause "ITU-T Recommendation V.250 [14] dial 
command". 

Defined values 

<n>: integer type (parameter sets the adjustment for outgoing calls) 

presentation indicator is used according to the subscription of the CLIR service 

1 CLIR invocation 

2 CLIR suppression 

<m>: integer type (parameter shows the subscriber CLIR service status in the network) 

CLIR not provisioned 

1 CLIR provisioned in permanent mode 

2 unknown (e.g. no network, etc.) 

3 CLIR temporary mode presentation restricted 

4 CLIR temporary mode presentation allowed 
Implementation 

Optional. 

7.8 Connected line identification presentation +COLP 



Table 41 : +COLP parameter command syntax 



Command 


Possible response(s) 


+ COLP= [<n>] 




+COLP? 


+COLP: <n>,<m> 


+COLP=? 


+COLP : (list of supported <n>s) 



Description 

This command refers to the GSM/UMTS supplementary service COLP (Connected Line Identification Presentation) 
that enables a calling subscriber to get the connected line identity (COL) of the called party after setting up a mobile 
originated call. The command enables or disables the presentation of the COL at the TE. It has no effect on the 
execution of the supplementary service COLR in the network. 

When enabled (and called subscriber allows), 

+COLP : <number> , <type> [ , <subaddr> , <satype> [ , <alpha>] ] intermediate result code is returned 
from TA to TE before any +CR or ITU-T Recommendation V.250 [14] responses. It is manufacturer specific if this 
response is used when normal voice call is established. 

Read command gives the status of <n>, and also triggers an interrogation of the provision status of the COLP service 
according 3GPP TS 22.081 [3] (given in <m>). 
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Test command returns values supported as a compound value. 
Defined values 

<n>: integer type (parameter sets/shows the result code presentation status to the TE) 

disable 

1 enable 

<m>; integer type (parameter shows the subscriber COLP service status in the network) 

COLP not provisioned 

1 COLP provisioned 

2 unknown (e.g. no network, etc.) 

<number>, <type>, <subaddr>, <satype>, <alpha>: refer +CLIP 
Implementation 
Optional. 

7.9 Called line identification presentation +CDIP 



Table 42: +CDIP parameter command syntax 



Command 


Possible response(s) 


+CDIP= [<n>] 




+CDIP? 


+CDIP: <n>,<m> 


+CDIP=? 


+CDIP : (list of supported <n>s) 



Description 

This command related to a network service that provides "multiple called numbers (called line identifications) service" 
to an MT. This command enables a called subscriber to get the called line identification of the called party when 
receiving a mobile terminated call. Set command enables or disables the presentation of the called line identifications at 
the TE. 

When the presentation of the called hne identification at the TE is enabled, unsolicited result code 

+ CDIP: <number> , <type> [ , <subaddr> , <satype>] is returned after every RING (or +CRING : <type>; 
refer subclause "Cellular result codes +CRC") result code sent from TA to TE. It is manufacturer specific if this 
response is used when normal voice call is answered. 

Read conmiand gives the status of <n>, and also triggers an interrogation of the provision status of the "multiple called 
numbers" service. Test command returns values supported as a compoimd value. 

Defined values 

<n>: integer type (parameter sets/shows the result code presentation status to the TE) 

disable 

1 enable 

<m>: integer type (parameter shows the subscriber "multiple called numbers" service status in the network) 

"multiple called numbers service" is not provisioned 

1 "multiple called numbers service" is provisioned 

2 unknown (e.g. no network, etc.) 
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<number>: string type phone number of format specified by < type > 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 
<subaddr>: string type subaddress of format specified by <satype> 

<satype>: type of subaddress octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.8) 
Implementation 
Optional. 

7. 1 Closed user group +CCUG 



Table 43: +CCUG parameter command syntax 



Command 


Possible response(s) 


+CCUG= [<n> [ , <index> [ , <inf o>] ] ] 




+CCUG? 


+CCUG: <n>, <index>, <inf o> 


+CCUG=? 





Description 

This command allows control of the Closed User Group supplementary service (refer 3GPP TS 22.085 [21]). Set 
command enables the served subscriber to select a CUG index, to suppress the Outgoing Access (OA), and to suppress 
the preferential CUG. 

Set command with <n>=l enables to control the CUG information on the air interface as a default adjustment for all 
following outgoing calls. The interaction of this command with other commands based on other GSM/UMTS 
supplementary services is described in the GSM/UMTS standard. 

NOTE: On a per call base CUG functionaUty is explained in subclause "ITU-T Recommendation V.250 [14] dial 
command". 

Defined values 

<n>: integer type 

disable CUG temporary mode 

1 enable CUG temporary mode 
<index>: integer type 

0...9 CUG index 

10 no index (preferred CUG taken from subscriber data) 
<info>: integer type 

no information 

1 suppress OA 

2 suppress preferential CUG 

3 suppress OA and preferential CUG 
Implementation 

Optional. 
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7.1 1 Call forwarding number and conditions +CCFC 



Table 44: +CCFC action command syntax 



Command 


Possible response(s) 


+CCFC=<reason> , <mode> [ , < 
number> [ , <type> [ , <class> 
[ , <subaddr> [ , <satype> [ , < 
time>] ] ] ] ] ] 


+CME ERROR: <err> 

when <mode>=2 and command successful: 

+CCFC : <status> , <classl> [ , <number> , <type> [ , <subad 
dr> , <satype> [ , <tiine>] ] ] 

[<CR><LF>+CCFC : < Status > , <class2> [, <number> , <type 

> [ , <subaddr> , <satype> [ , <time>] ] ] 

[...]] 


+CCFC=? 


+CCFC : (list of supported <reason>s) 



Description 

This command allows control of the call forwarding supplementary service according to 3GPP TS 22.082 [4]. 
Registration, erasure, activation, deactivation, and status query are supported. When querying the status of a network 
service (<mode>=2) the response line for 'not active' case (<status>=0) should be returned only if service is not 
active for any <class>. 

Test command returns reason values supported as a compound value. 
Defined values 

<reason>: integer type 

unconditional 

1 mobile busy 

2 no reply 

3 not reachable 

4 all call forwarding (refer 3GPP TS 22.030 [19]) 

5 all conditional call forwarding (refer 3GPP TS 22.030 [19]) 
<mode>: integer type 

disable 

1 enable 

2 query status 

3 registration 

4 erasure 

<number>: string type phone number of forwarding address in format specified by <type> 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7); default 145 when 
dialling string includes international access code character "+", otherwise 129 

<subaddr>: string type subaddress of format specified by <satype> 

<satype>: type of subaddress octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.8); default 128 
<classx> is a sum of integers each representing a class of information (default 7 - voice, data and fax): 
1 voice (telephony) 
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2 


data (refers to all bearer services; with <mode>=2 this may refer only to some bearer service if TA does 




IIUL aUppUlL ValUCa lU, Ut- allU 1Z.O) 


A 

T- 




Q 
O 


short message service 






32 


data circuit async 


64 


dedicated packet access 


128 


dedicated PAD access 


<tiTne>: 


integer type 



1...30 when "no reply" is enabled or queried, this gives the time in seconds to wait before call is forwarded, 
default value 20 



<status>: integer type 

not active 

1 active 
Implementation 

Mandatory for MT supporting AT conmiands only and not supporting the control through dial conmiand D. 

7.12 Call waiting +CCWA 



Table 45: +CCWA parameter command syntax 



Command 


Possible response(s) 


+CCWA= [<n> [ , <mode> [ , <class>] ] ] 


+CME ERROR: <err> 

when <mode>=2 and command successful 

+CCWA: <status> , <classl> 
[<CR><LF>+CCWA: <status>, <class2> 
[...]] 


+CCWA? 


+CCWA: <n> 


+CCWA=? 


+CCWA : (Ust of supported <n>s) 



Description 

This command allows control of the Call Waiting supplementary service according to 3GPP TS 22.083 [5]. Activation, 

deactivation and status query are supported. When querying the status of a network service (<mode>=2) the response 
line for 'not active' case (<status>=0) should be returned only if service is not active for any <class>. Parameter 
<n> is used to disable/enable the presentation of an unsoUcited result code 

+CCWA: <number> , <type> , <class> , [<alpha>] [,<CLI validity> [ , <subaddr> , <satype> [ , <p 
riority>] ] ] to the TE when call waiting service is enabled. Command should be abortable when network is 
interrogated. 

The interaction of this conmiand with other commands based on other GSM/UMTS supplementary services is described 
in the GSM/UMTS standards. 

Test command returns values supported as a compound value. 
Defined values 

<n>: integer type (sets/shows the result code presentation status to the TE) 
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disable 

1 enable 

<mode>: integer type (when <mode> parameter is not given, network is not interrogated) 

disable 

1 enable 

2 query status 

<classx>: is a sum of integers each representing a class of information (default 7 - voice, data and fax) 

1 voice (telephony) 

2 data (refers to all bearer services; with <mode>=2 this may refer only to some bearer service if TA does 
not support values 16, 32, 64 and 128) 

4 fax (facsimile services) 

8 short message service 

16 data circuit sync 

32 data circuit async 

64 dedicated packet access 

128 dedicated PAD access 

<status>: integer type 

not active 

1 active 

<number>: string type phone number of calling address in format specified by <type> 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 

<alpha>: optional string type alphanumeric representation of <number> corresponding to the entry found in 
phonebook; used character set should be the one selected with command Select TE Character Set +CSCS 

<CLI validity> : integer type. This parameter can provide details why <number> does not contain a calling 
party BCD number (refer 3GPP TS 24.008 [8] subclause 10.5.4.30). 

CLI valid 

1 CLI has been withheld by the originator (refer 3GPP TS 24.008 [8] table 10.5.135a/3GPP TS 24.008 code 
"Reject by user") 

2 CLI is not available due to interworking problems or Umitations of originating network (refer 
3GPP TS 24.008 [8] table 10.5.135a/3GPP TS 24.008 code "Interaction with other service") 

3 CLI is not available due to calling party being of type payphone (refer 3GPP TS 24.008 [8] 
table 10.5.135a/3GPP TS 24.008 code "Coin line/payphone") 

4 CLI is not available due to other reasons (refer 3GPP TS 24.008 [8] table 10.5. 135a/3GPP TS 24.008 code 
"Unavailable") 

When CLI is not available (<CL I validity>=2, <CLI validity>=3 or <CLI validity>=4), <number> 
shall be an empty string ("") and <type> value will not be significant. Nevertheless, TA may return the reconmiended 
value 128 for <type> ((TON/NPI unknown in accordance with 3GPP TS 24.008 [8] subclause 10.5.4.7). 
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When CLI has been withheld by the originator, (<CLI validity>=l) and the CLIP is provisioned with the 
"override category" option (refer 3GPP TS 22.081[3] and 3GPP TS 23.081[40]), <number> and <type> is provided. 
Otherwise, TA shall return the same setting for <number> and <type> as if the CLI was not available. 

<subaddr>: string type subaddress of format specified by <satype> 

<satype>: type of subaddress octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.8) 

<priority>: optional digit type parameter indicating that the eMLPP priority level of the incoming call. The 
priority level values are as defined in eMLPP specification 3GPP TS 22.067 [54]. 

Implementation 

Optional. 

7.13 Call related supplementary services +CHLD 



Table 46: +CHLD action command syntax 



Command 


Possible response(s) 


+CHLD= [<n>] 


+CME ERROR: <err> 


+CHLD=? 


[ + CHLD : ( Ust of supported < n >s ) ] 



Description 

This command allows the control of the following call related services: 

- a call can be temporarily disconnected from the MT but the connection is retained by the network; 

- multiparty conversation (conference calls); 

the served subscriber who has two calls (one held and the other either active or alerting) can connect the other 
parties and release the served subscriber's own cormection. 

Calls can be put on hold, recovered, released, added to conversation, and transferred similarly as defined in 
3GPP TS 22.030 [19]. Refer subclause 9.2 for possible <err> values. 

This is based on the GSM/UMTS supplementary services HOLD (Call Hold; refer 3GPP TS 22.083 [5] clause 2), 
MPTY (MultiParty; refer 3GPP TS 22.084 [22]) and ECT (Explicit Call Transfer; refer 3GPP TS 22.091 [30]). The 
interaction of this command with other commands based on other GSM/UMTS supplementary services is described in 

the GSM/UMTS standards. 

NOTE 1: Call Hold, MultiParty and Explicit Call Transfer are only appUcable to teleservice 11. 

It is recommended (although optional) that test command returns a list of operations which are supported. The call 
number required by some operations shall be denoted by "x" (e.g. +CHLD : ( , 1 , Ix , 2 , 2x , 3 ) ). 

Defined values 

<n>: integer type; equals to numbers entered before SEND button in 3GPP TS 22.030 [19] subclause 6.5.5.1 

NOTE 2: The "directory number" case shall be handled with dial command D, and the END case with hangup 
command H (or +CHUP). The 4*"directory number" case is handled with +CTFR command. 

Implementation 

Optional. 



ETSI 



3GPP TS 27.007 version 10.5.0 Release 10 



65 



ETSI TS 127 007 VI 0.5.0 (2011-10) 



7. 1 4 Call deflection +CTFR 



Table 47: +CTFR action command syntax 



Command 


Possible response(s) 


+CTFR=<number> [ , <type> [ , <subaddr> [ , <satype>] ] ] 


+CME ERROR: <err> 


+CTFR=? 





Description 

This refers to a service that causes an incoming alerting call to be forwarded to a specified number. Action command 
does this. Refer subclause 9.2 for possible <err> values. 

This is based on the GSM/UMTS supplementary service CD (Call Deflection; refer 3GPP TS 22.072 [31]). The 
interaction of this command with other commands based on other GSM/UMTS supplementary services is described in 
the GSM/UMTS standards. 

NOTE: Call Deflection is only applicable to teleservice 1 1 . 

Defined values 

< number >: string type phone number of format specified by < type > 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7); default 145 when 
dialling string includes international access code character "+", otherwise 129 

<subaddr>: string type subaddress of format specified by <satype> 

<satype>: type of subaddress octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.8); default 128 
Implementation 
Optional. 

7. 1 5 Unstructured supplementary service data +CUSD 



Table 48: +CUSD parameter command syntax 



Command 


Possible response(s) 


+CUSD= [<n> [ , <str> [ , <dcs>] ] ] 


+CME ERROR: <err> 


+CUSD? 


+CUSD: <n> 


+CUSD=? 


+CUSD : (hst of supported <n>s) 



Description 

This command allows control of the Unstuctured Supplementary Service Data (USSD) according to 

3GPP TS 22.090 [23]. Both network and mobile initiated operations are supported. Parameter <n> is used to 

disable/enable the presentation of an unsolicited result code. The value <n>=2 is used to cancel an ongoing USSD 

session. For an USSD response from the network, or a network initiated operation, the format is: 

+CUSD: <m> [ , <str>, <dcs>] . 

When < str > is given, a mobile initiated USSD-string or a response USSD-string to a network initiated operation is 
sent to the network. The response USSD-string from the network is returned in a subsequent unsolicited +CUSD result 
code. 

NOTE: In case of successful mobile initiated operation, TA implemented according to a version prior to 6 of this 
standard, waits the USSD response from the network and sends it to the TE before the final result code. 
This will block the AT command interface for the period of the operation. Such TA does not support <n> 
value 2. 
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The interaction of this command with other commands based on other GSM/UMTS supplementary services is described 

in the GSM/UMTS standards. 

Test command returns values supported as a compound value. 
Defined values 

<n>: integer type (sets/shows the result code presentation status to the TE) 

disable the result code presentation to the TE 

1 enable the result code presentation to the TE 

2 cancel session (not applicable to read command response) 

<str>: string type USSD-string (when <str> parameter is not given, network is not interrogated): 

- if < dc s > indicates that 3GPP TS 23 .038 [25] 7 bit default alphabet is used: 

if TE character set other than "HEX" (refer command Select TE Character Set +CSCS): MT/TA converts 
GSM alphabet into current TE character set according to rules of 3GPP TS 27.005 [24] Annex A 

if TE character set is " HEX " : MT/TA converts each 7-bit character of GSM alphabet into two IRA 
character long hexadecimal number (e.g. character n (GSM 23) is presented as 17 (IRA 49 and 55)) 

- if <dcs > indicates that 8-bit data coding scheme is used: MT/TA converts each 8-bit octet into two IRA 
character long hexadecimal number (e.g. octet with integer value 42 is presented to TE as two characters 2A 
(IRA 50 and 65)) 

- if <dcs > indicates that 16-bit data coding scheme (UCS2) is used: MT/TA spUts the 16 bits into two 8-bit 
octets. Each of those octets are converted as per the 8-bit data coding scheme, with the most significant octet 
first (e.g. decimal value 4906 is presented to TE as four characters 132A (IRA 49, 51, 50 and 65)) 

<dcs>: integer type (shows Cell Broadcast Data Coding Scheme, see 3GPP TS 23.038 [25]). Default value is 0. 

<m>: integer type (shows the USSD response from the network or the network initiated operation) 

no further user action required (network initiated USSD-Notify, or no further information needed after 

mobile initiated operation) 

1 further user action required (network initiated USSD-Request, or further information needed after mobile 
initiated operation) 

2 USSD terminated by network 

3 other local client has responded 

4 operation not supported 

5 network time out 
Implementation 
Optional. 

7. 1 6 Advice of Charge +CAOC 



Table 49: +CAOC parameter command syntax 



Command 


Possible response(s) 


+CAOC [=<mode>] 


[+CAOC: <ccm>] 
+CME ERROR: <err> 


+CAOC? 


+CAOC: <mode> 
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+CAOC=? 



[+CAOC : (list of supported <niode>s) ] 



Description 

This refers to Advice of Charge supplementary service (3GPP TS 22.024 [26] and 3GPP TS 22.086 [27]) that enables 
subscriber to get information about the cost of calls. With <mode>=0, the execute command returns the current call 
meter value from the MT. 

The command also includes the possibility to enable an unsolicited event reporting of the CCM information. The 
unsolicited result code +CCCM : <ccni> is sent when the CCM value changes, but not more that every 10 seconds. 
Deactivation of the unsolicited event reporting is made with the same conmiand. 

Refer subclause 9.2 for possible <err> values. 

NOTE: Advice of Charge values stored in the SIM card or in the active apphcation in the UICC (GSM or USIM) 
(ACM, ACMmax, PUCT) can be accessed with generic or restricted SIM access command (+CSIM or 
+CRSM)). Those values can be more readily accessed with commands +CACM, +CAMM and +CPUC . 

The Read command indicates whether the unsolicited reporting is activated or not. Read command is available when the 
unsolicited result code is supported. 

It is recommended (although optional) that the test command returns the supported mode values. 
Defined values 

<mode>: integer type 

query CCM value 

1 deactivate the unsolicited reporting of CCM value 

2 activate the unsolicited reporting of CCM value 

<ccm>: string type; three bytes of the current call meter value in hexadecimal format (e.g. "OOOOIE" indicates 
decimal value 30); value is in home units and bytes are similarly coded as ACMmax value in the SIM card or in 
the active application in the UICC (GSM or USIM) 

Implementation 

Optional. 

7.1 7 Supplementary service notifications +CSSN 



Table 50: +CSSN parameter command syntax 



Command 


Possible response(s) 


+CSSN= [<n> [, <ni>] ] 




+CSSN? 


+CSSN: <n>,<m> 


+CSSN=? 


+CSSN : (list of supported <n>s) , (list of supported <m>s) 



Description 

This command refers to supplementary service related network initiated notifications. The set command 
enables/disables the presentation of notification result codes from TA to TE. 

When <n>=l and a supplementary service notification is received after a mobile originated call setup, intermediate 
result code +CSSI : <codel> [ , <index>] is sent to TE before any other MO call setup result codes presented in 
the present document or in ITU-T Recommendation V.250 [14]. When several different <codel >s are received from 
the network, each of them shall have its own +CSSI result code. 
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When <m>=l and a supplementary service notification is received during a mobile terminated call setup or during a 
call, or when a forward check supplementary service notification is received, unsolicited result code 
+CSSU: <code2> [ , <index> [ , <number>, <type> [ , <subaddr>, <satype>] ] ] is sent to TE. In case of 
MT call setup, result code is sent after every +CLIP result code (refer command "Calling line identification 
presentation +CLIP") and when several different <code2 >s are received from the network, each of them shall have its 
own +CSSU result code. 

Test command returns values supported as a compound value. 
Defined values 

<n>: integer type (parameter sets/shows the +CSSI result code presentation status to the TE) 

disable 

1 enable 

<m>: integer type (parameter sets/shows the +CSSU result code presentation status to the TE) 

disable 

1 enable 

<codel >: integer type (it is manufacturer specific, which of these codes are supported) 






unconditional call forwarding is active 


1 


some of the conditional call forwardings are active 


2 


call has been forwarded 


3 


call is waiting 


4 


this is a CUG call (also <index> present) 


5 


outgoing calls are barred 


6 


incoming calls are barred 


7 


CLIR suppression rejected 


8 


call has been deflected 



<index>: refer "Closed user group +CCUG" 

<code2 >: integer type (it is manufacturer specific, which of these codes are supported) 

this is a forwarded call (MT call setup) 

1 this is a CUG call (also < index> present) (MT call setup) 

2 call has been put on hold (during a voice call) 

3 call has been retrieved (during a voice call) 

4 multiparty call entered (during a voice call) 

5 call on hold has been released (this is not a SS notification) (during a voice call) 

6 forward check SS message received (can be received whenever) 

7 call is being connected (alerting) with the remote party in alerting state in explicit call transfer operation 
(during a voice call) 

8 call has been connected with the other remote party in explicit call transfer operation (also number and 
subaddress parameters may be present) (during a voice call or MT call setup) 
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9 this is a deflected call (MT call setup) 

10 additional incoming call forwarded 

<number>: string type phone number of format specified by < type > 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 

<subaddr>: string type subaddress of format specified by <satype> 

<satype>: type of subaddress octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.8) 
Implementation 
Optional. 

7. 1 8 List current calls +CLCC 



Table 51 :+CLCC action command syntax 



Command 


Possible response(s) 


+CLCC 


[+CLCC : <id.l> , <d.ir> , <stat> , <mode> , <mpty> [ , <number> , < 
type> [ , <alpha> [ , <priority> [ , <CLI validity>] ] ] ] 

[<CR><LF>+CLCC : <id2>,<dir>,<stat>, <mode> , <mpty> [ , <n 
uinber> , <type> [ , <alpha> [ , <priority> [ , <CLI validity>] ] 
] ] 

[...]]] 

+CME ERROR: <err> 


+CLCC=? 





Description 

Returns list of current calls of MT. If command succeeds but no calls are available, no information response is sent to 
TE. Refer subclause 9.2 for possible <err> values. 

Defined values 

<idx>: integer type; call identification number as described in 3GPP TS 22.030 [19] subclause 4.5.5.1; this number 
can be used in +CHLD command operations 

<dir>: integer type 

mobile originated (MO) call 

1 mobile terminated (MT) call 
<stat>: integer type (state of the call) 

active 

1 held 

2 diaUng (MO call) 

3 alerting (MO call) 

4 incoming (MT call) 

5 waiting (MT call) 
<mode>:integer type (bearer/teleservice) 
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n 
u 


voice 


1 

1 






filX 


'1 
D 


voice followed by ddtd, voice mode 


A 


alLClllaLlllg VUlCC/UaLU, VUlCC IIUJUC 




alLcrilaLlIlg VUlCc/laA, VUlCc IIIUUC 


6 


voice followed by data, data mode 


7 


alternating voice/data, data mode 


8 


alternating voice/fax, fax mode 


9 


unknown 



<mpty>: integer type 

call is not one of multiparty (conference) call parties 

1 call is one of multiparty (conference) call parties 
<number >: string type phone number in format specified by < type > 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 

<alpha>: string type alphanumeric representation of <number> corresponding to the entry found in phonebook; 
used character set should be the one selected with command Select TE Character Set +CSCS 

<priority>: optional digit type parameter indicating the eMLPP priority level of the call, values specified in 
3GPP TS 22.067 [54] 

<CLI validity>: integer type. This parameter can provide details why <number> does not contain a calling 
party BCD number (refer 3GPP TS 24.008 [8] subclause 10.5.4.30). The parameter is not present for MO call 
types. 

CLI valid 

1 CLI has been withheld by the originator (refer 3GPP TS 24.008 [8J table 10.5.135a/3GPP TS 24.008 code 
"Reject by user") 

2 CLI is not available due to interworking problems or Umitations of originating network (refer 
3GPP TS 24.008 [8] table 10.5.135a/3GPP TS 24.008 code "Interaction with other service") 

3 CLI is not available due to calling party being of type payphone (refer 3GPP TS 24.008 [8] 
table 10.5.135a/3GPP TS 24.008 code "Coin line/payphone") 

4 CLI is not available due to other reasons (refer 3GPP TS 24.008 [8] table 10.5.135a/3GPP TS 24.008 code 
"Unavailable")When CLI is not available (<CLI validity>=2, <CLI validity>=3 or <CLI validity>=4), 
<number> shall be an empty string ("") and <type> value will not be significant. Nevertheless, TA may return the 
recommended value 128 for <type> ((TON/NPI unknown in accordance with 3GPP TS 24.008 [8] 
subclause 10.5.4.7). 

When CLI has been withheld by the originator, (<CLI validity>=l) and the CLIP is provisioned with the 
"override category" option (refer 3GPP TS 22.081 [3] and 3GPP TS 23.081 [40]), <number> and <type> is 
provided. Otherwise, TA shall return the same setting for <nuinber> and <type> as if the CLI was not available. 

Implementation 

Optional. Recommended when +CHLD command is implemented. 
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7.19 Preferred PLMN list +CPOL 



Table 52:+CPOL parameter command syntax 



Command 


Possible response(s) 


+CPOL= [<index>] [,<for 
mat> [ , <oper> [ , <GSM Ac 
T>, <GSM_Compact_AcT>, 
<UTRAN_AcT> , <E- 
UTRAN_AcT>] ] ] 


+CME ERROR: <err> 


+CPOL? 


+CPOL: <indexl>, <f ormat>, <operl> [ , <GSM AcTl>,< 
GSM_Compact_AcTl> , <UTRAN_AcTl> , <E-UTRAN_AcTl>] 

[<CR><LF>+CPOL : <index2>, <format>, <oper2> [, <GS 
M_AcT2 > , <GSM_Compact_AcT2 > , <UTRAN_AcT2 > , <E- 
UTRAN_AcT2>] 

[...]] 

+CME ERROR: <err> 


+CPOL=? 


+CPOL : (list of supported <index>s) , (list of supported 
<f ormat>s) 

+CME ERROR: <err> 



Description 

This command is used to edit the PLMN selector with Access Technology lists in the SIM card or active appUcation in 
the UICC (GSM or USIM). 

Execute command writes an entry in the SIM/USIM list of preferred PLMNs, previously selected by the command 
+CPLS. If no list has been previously selected, the User controlled PLMN selector with Access Technology, 
EFpLMNwAcT, is the one accessed by default. If <index> is given but <oper> is left out, entry is deleted. If <oper> is 
given but <index> is left out, <oper> is put in the next free location. If only <f ormat> is given, the format of the 
<oper> in the read command is changed. The Access Technology selection parameters, <GSM_AcT>, 
<GSM_Compact_AcT> and <UTRAIsr_AcT> and <E-UTRAIsr_AcT> are required when writing User controlled 
PLMN selector with Access Technology, EFplmnwAct, Operator controlled PLMN selector with Access Technology 
EFopLMNwAcT and HPLMN selector with Access Technology EFhplmnwAct, see 3GPP TS 31.102 [59]. Refer 
subclause 9.2 for possible <err> values. 

NOTE 1: MT can also update the User controlled PLMN selector with Access Technology, EFplmnwAct, 
automatically when new networks are selected. 

NOTE 2: The Operator controlled PLMN selector with Access Technology EFqplmnwAct. can only be written if the 
write access condition in the SIM/USIM has been previously verified. 

Read command returns all used entries from the SIM/USIM list of preferred PLMNs, previously selected by the 
command +CPLS, with the Access Technologies for each PLMN in the hst. 

Test command returns the whole index range supported by the SIM. 

Defined values 

< indexn>: integer type; the order number of operator in the SIM/USIM preferred operator Ust 

< format >: integer type 

long format alphanumeric <oper> 

1 short format alphanumeric <oper> 

2 numeric <oper> 
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<opern>: string type; <f ormat> indicates if the format is alphanumeric or numeric (see +COPS) 
<GSM_AcTn>: integer type; GSM access technology: 

access technology not selected 

1 access technology selected 

<GSM_Compact_AcTn>: integer type; GSM compact access technology 

access technology not selected 

1 access technology selected 
<UTRAN_AcTn>: integer type; UTRAN access technology 

access technology not selected 

1 access technology selected 
<E-UTRAN_AcTn>: integer type; E-UTRAN access technology 

access technology not selected 

1 access technology selected 
Implementation 

Optional. 

7.20 Selection of preferred PLMN list +CPLS 



Table 53:+CPLS parameter command syntax 



Command 


Possible response(s) 


+CPLS=<list> 


+CME ERROR: <err> 


+CPLS? 


+CPLS: <list> 
+CME ERROR: <err> 


+CPLS=? 


+CPLS : (list of supported <list>s) 

+CME ERROR: <err> 



Description 

This command is used to select one PLMN selector with Access Technology list in the SIM card or active apphcation in 
the UICC (GSM or USIM), that is used by +CPOL conmiand. 

Execute conmiand selects a list in the SIM/USIM. Refer subclause 9.2 for possible <err> values. 
Read command returns the selected PLMN selector Ust from the SIM/USIM 
Test command returns the whole index range supported lists by the SIM/USIM 
Defined values 

< 1 i s t >: integer type 

User controlled PLMN selector with Access Technology EFplmnwAct^ if not found in the SIM/UICC then 
PLMN preferred list EFplmnsci (this file is only available in SIM card or GSM application selected in UICC) 

1 Operator controlled PLMN selector with Access Technology EFoplmnwAct 

2 HPLMN selector with Access Technology EFhplmnwAct 
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Implementation 

Optional. 

7.21 Read operator names +COPN 



Table 54:+COPN action command syntax 



Command 


Possible response(s) 


+COPN 


+COPN: <nuniericl> , <alphal> 
[<CR><LF>+COPN: <nuineric2>, <alpha2> 
[...]] 

+CME ERROR: <err> 


+COPN=? 





Description 

Execute command returns the list of operator names from the MT. Each operator code <numericn> that has an 
alphanumeric equivalent <alphan> in the MT memory shall be returned. Refer subclause 9.2 for possible <err> 
values. 

Defined values 

<numericn>: string type; operator in numeric format (see +COPS) 

<alphar!>: string type; operator in long alphanumeric format (see +COPS) 
Implementation 
Optional. 

7.22 eMLPP Priority Registration and Interrogation +CAEI\/ILPP 



Table 55: +CAEMLPP parameter command syntax 



Command 


Possible Response(s) 


+CAEMLPP=<priority> 


+CME ERROR: <err> 


+CAEMLPP? 


+CAEMLPP: <d.efault priority> , <max priority> 
+CME ERROR: <err> 


+CAEMLPP=? 





Description 

The execute command is used to change the default priority level of the user in the network. The requested priority level 
is checked against the eMLPP subscription of the user stored on the SIM card or in the active application in the UICC 
(GSM or USIM) EFeMLPP- If the user doesn't have subscription for the requested priority level an ERROR or 
+CMEE ERROR result code is returned. 

The read command triggers an interrogation of the provision of the maximum priority level which the service subscriber 
is allowed to use and default priority level activated by the user. 

If the service is not provisioned, a result code including the SS-Status (?) parameter is returned. 
Defined Values 

<priority>: integer type parameter which identifies the default priority level to be activated in the network, 
values specified in 3GPP TS 22.067 [54] 
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<def ault_priority>: integer type parameter which identifies the default priority level which is activated in 
the network, values specified in 3GPP TS 22.067 [54] 

<max_priority>: integer type parameter which identifies the maximum priority level for which the service 
subscriber has a subscription in the network, values specified in 3GPP TS 22.067 [54] 

Implementation 

Mandatory for a MT supporting AT commands only and supplemantery service eMLPP is implemented. 

7.23 eMLPP subscriptions +CPPS 



Table 56: +CPPS action command syntax 



Command 


Possible response(s) 


+CPPS 


+CPPS : <priority> [ , <priority> 
[...]] 

+CME ERROR: <err> 


+CPPS=? 





Description 

This command returns all eMLPP priority subscriptions of the user stored on the SIM card or in the active application in 
the UlCC (GSM or USIM) EFeMLPP- If no explicit priority level subscription is stored on the SIM card or in the active 
application in the UICC (GSM or USIM) EFeMLPP the result code OK is returned. 

Defined values 

<priority>: integer type, eMLPP subscription to priority level {0,1, ..,4} as defined in 3GPP TS 22.067 [54]. 
Implementation 

Mandatory for a MT supporting AT commands only and eMLPP is implemented. 

7.24 Fast call setup conditions +CFCS 



Table 57: +CFCS parameter command syntax 



Command 


Possible response(s) 


+CFCS=<priority> , <status> 


+CME ERROR: <err> 


+CFCS? 


+CFCS: <priority> [ , <priority> 
[...]] 

+CME ERROR: <err> 


+CFCS=? 


+CFCS : (list of supported 
<priority>, <status>s) 



Description 

The set command is used to edit the status of the priority level for fast call set-up stored on the SIM card or in the active 
application in the UICC (GSM or USIM) EFeMup- If the user has no subscription to the priority level status he wants to 
edit, an ERROR or +CME ERROR result code is returned. 

The read command returns all enabled priority levels for fast call set-up stored on the SIM card or in the active 
appUcation in the UICC (GSM or USIM) EFsmlpp- If no priority level is enabled for fast call set-up, the result code OK 
is returned. 

Test command returns the values supported by the UE. 
Defined values 

<priority>: integer type, eMLPP fast call set-up priority level {0,1, ..,4} as defined in 3GPP TS 22.067 [54] 
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<status>: integer type 

disable <priority> for fast call set-up 

1 enable < p r i o r i t y > for fast call set-up 
Implementation 

Mandatory for a MT supporting AT commands only and eMLPP is implemented. 

7.25 Automatic answer for eMLPP Service +CAAP 



Table 58: +CAAP parameter command syntax 



Command 


Possible response(s) 


+CAAP=<priority> , <status> 


+CME ERROR: <err> 


+CAAP? 


+CAAP: <priority> [ , <priority> 
[...]] 

+CME ERROR: <err> 


+CAAP=? 


+CAAP : (list of supported 
<priority>, <status>s) 



Description 

The set command is used to edit the status of the priority level for automatic answering for eMLPP stored on the SIM 
card or in the active application in the UlCC (GSM or USIM) EFaacm- If the user has no subscription to the priority 
level status he wants to edit, an ERROR or +CME ERROR result code is returned. 

The read command returns all enabled priority levels for automatic answering for eMLPP stored on the SIM card or in 
the active application in the UICC (GSM or USIM) EFaabm- If no priority level is enabled for automatic answering for 
eMLPP, the result code OK is returned. 

Test command returns the values supported by the UE. 

Defined values 

<priority>: eMLPP automatic answer priority level value {A,B,0,1,..,4} as defined in 3GPP TS 22.067 [54] 
<status>: integer type 

disable eMLPP <priority> for automatic answering 

1 enable eMLPP <priority> for automatic answering 
Implementation 

Mandatory for a MT supporting AT commands only and eMLPP is implemented. 

7.26 User to User Signalling Service 1 +CUUS1 



Table 59: +CUUS1 parameter command syntax 



Command 


Possible response(s) 


+CUUS1= [<n> [ , <m> [ , <Tnessage> [ , <UUIE> 
[ , <message> [ , <UUIE> [,...]]]]]]] 


+CME ERROR: <err> 


+CUUS1? 


+CUUS1 : <n>, <m> [ , <message>, <UUIE> [ , <mes 
sage> , <UUIE> [,...]]] 
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+CUUS1=? 


+ CUUS1 : (list of supported <n>s) , (list of supported 




<m>s) , (list of supported <message>s) , (list of 




supported <messagel>s) , (list of supported 




<messageU>s) 



Description 

This command allows control of the User-to-User Signalling Supplementary Service 1 (UUSl) according to 
3GPPTS 22.087 [58]. 

Parameters <message> and <UUIE> are used to activate/deactivate the implicit request of the User-to-User 
Signalling Supplementary Service 1 . 

When <message> and <UUIE> are both present the string specified in <UUIE> is included as the value part of the 
User-to-User Information Element (as defined in 3GPP TS 24.008 [8]) into all subsequent messages of type 
<message>. If parameter <message> is present but parameter <UUIE> is not present then the User-to-User 
Information Element shall not be present in subsequent messages of type <message>. 

Parameters <n> and <ni> are used to enable/disable the presentation of incoming User-to-User Information Elements. 

When <n> = 1 and a User-to-User Information is received after a mobile originated call setup or after hanging up a call, 
intermediate result code +CUUS1 1 : <messagel>, <UUIE> is sent to the TE. 

When <m> = 1 and a User-to-User Information is received during a mobile terminated call setup or during a remote 
party call hangup, unsolicited result code +CUUS1U : <messageU> , <UUIE> is sent to the TE. 

Test command returns values supported as a compound value. 

The interaction of this command with other commands based on other supplementary services is described in the 3G 
standard. 

Defined values 

<n>: integer type (parameter sets/shows the +CUUS1I result code presentation status in the TA) 

disable. 

1 enable. 

<m>: integer type (parameter sets/shows the +CUUS1U result code presentation status in the TA) 

disable. 

1 enable. 

<inessage>: integer type (type of message containing the outgoing User-to-User Information Element) 






ANY 


1 


SETUP 


2 


ALERT 


3 


CONNECT 


4 


DISCONNECT 


5 


RELEASE 


6 


RELEASE_COMPLETE 



<messagel>: integer type (type of message containing the intermediate User-to-User Information Element) 
ANY 
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1 ALERT 

2 PROGRESS 

3 CONNECT (sent after + COLP if enabled) 

4 RELEASE 

<messageU>: integer type (type of message containing the unsollicited User-to-User Information Element) 

ANY 

1 SETUP (returned after +CLIP if presented, otherwise after every RING or +CRING) 

2 DISCONNECT 

3 RELEASE_COMPLETE 

<UUIE>: the User-user Information Element (as defined in 3GPP TS 24.008 [8]) in hexadecimal character format 
(for hexadecimal format, refer +CSCS). 

NOTE: If the TA does not distinguish the type of message containing the User-to-user Information Element, it 
can use the value for ANY message. 

Implementation 

Optional. 

7.27 Preferred network indication +CPNET 



Table 59A: +CPNET parameter command syntax 



Command 


Possible response(s) 


+CPNET=<Pref net> 




+CPNET? 


+CPNET: <Pref_net> 


+CPNET=? 


+CPNET : (hst of supported <Pref_net>s) 



Description 

This command indicates whether the terminal has preference <Pref_net> for GERAN/UTRAN/E-UTRAN or 
GAN, see 3GPP TS 44.318 [70]. 

Read command returns the current preference for GERAN/UTRAN/E-UTRAN or GAN. 

Test command returns the parameter indicating preference <Pref_net> for GERAN/UTRAN/E-UTRAN or GAN. 
Defined values 

<Pref_net>: integer type; indicates the preference for GERAN/UTRAN/E-UTRAN or GAN. 

GERAN/UTRAN/E-UTRAN shall be used. The terminal uses GERAN/UTRAN/E-UTRAN coverage only. 

1 GAN shall be used. The terminal used GAN coverage only. 

2 GERAN/UTRAN/E-UTRAN preferred. The terminal prefers to stay in GERAN/UTRAN/E-UTRAN rather 
than GAN. 

3 GAN preferred. The terminal prefers to stay in GAN rather than GERAN/UTRAN/E-UTRAN. 

NOTE: Usage of value or 1 will prevent the terminal from changing between GERAN/UTRAN/E-UTRAN and 
GAN. E.g. setting <Pref_net> to 1 indicates that only GAN will be used, and prevents the terminal 
from using available GERAN/UTRAN/E-UTRAN coverage. 

Implementation 
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Optional. 

7.28 Preferred network status +CPNSTAT 



Table 59B: +CPNSTAT parameter command syntax 



Command 


Possible response(s) 


+CPNSTAT= [<n>] 




+CPNSTAT? 


+CPNSTAT: <n>,<stat> 


+CPNSTAT=? 


+ C PNS TAT : ( list of supported < n > s ) 



Description 

Set command controls the presentation of an unsolicited result code +CPNSTAT : <stat> when <n>=l and there is a 
change in the preferred network indication status. 

Read command returns the status of result code presentation <n> and an integer <stat> which shows whether the 
terminal is in GERAN/UTRAN/E-UTRAN or GAN, see 3GPP TS 44.318 [70]. 

NOTE: Further details about registration status are available using commands +CREG (see subclause 7.2), 
+CGREG (see subclause 10.1.19) and +CEREG (see subclause 10.1.21). 

Test command returns the Ust of supported imsolicited result codes. 

Defined values 

<n>: integer type 

disable preferred network indication unsolicited result code. 

1 enable preferred network indication unsolicited result code +CPNSTAT : < stat >. 
<stat>: integer type; preferred network indication status. 

Requested network not available. 

1 GERAN/UTRAN/E-UTRAN used. 

2 GAN used. 
Implementation 
Optional. 

7.29 Current Packet Switched Bearer +CPSB 



Table 59C: +CPSB parameter command syntax 



Command 


Possible response(s) 


+CPSB= [<n>] 


+CME ERROR: <err> 


+CPSB? 


+CPSB: <n> [ , <cid> , <curr bearer>] 

+CME ERROR: <err> 


+CPSB=? 


+CPSB : (list of supported <n>s) 



Description 

Set command controls the presentation of an unsolicited result code +CPSB : <cid> , <curr_bearer> when 
<n>=l and the <cid> corresponds to a PDP context in the PDP- ACTIVE state or to an EPS bearer context and there is 
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a change in the current bearer due to the reception of a control or signalUng message from the network as specified in 
3GPP TS 44.060 [71], 3GPP TS 25.331 [74], or 3GPP TS 36.331 [86]. 

Read command returns the current status of unsohcited result code presentation <n>. Also the parameters <cid>, 
<curr_bearer> are returned for each defined context only when <n>=l and the <cid> corresponds to a PDF 
context in the PDP- ACTIVE state or to an EPS bearer context. 

Test command returns the Ust of supported <n>s. 

Defined values 

<n>: integer type 

disable the presentation of the unsohcited result code 

1 enable the presentation of the imsolicited result code 

+CPSB: <cid> , <curr_bearer> 

<cid>: A numeric parameter which specifies a particular PDP context or EPS bearer context definition. The 
<cid> parameter is local to the TE-MT interface and identifies only those PDP or EPS bearer contexts which 
have been setup via AT command (see the +CGDCONT and +CGDSCONT commands). 

<curr_bearer>: integer type; the current packet switched bearer which is established between the UE and 
network. 

There is currently no packet switched bearer between the UE and the network (e.g. RAB is released in UMTS 
or the TBF is released in GSM). This would mean that there is no bearer associated to the PDP context 
referred to by the <cid> parameter and hence no data transfer is currently occuring on that particular PDP 
context. This result code covers the case where the PDP context is active but there is no bearer associated 
with it. 

1 GPRS. (See 3GPP TS 44.060 [71] for definition of GPRS TBF Mode) 

2 EGPRS. (See 3GPP TS 44.060 [71] for definition of EGPRS TBF Mode) 

3 Non-HSUPA in uphnk and non-HSDPA in downhnk. (See NOTE 1 to NOTE 3) 

4 HSUPA in uplink and non-HSDPA in downlink. (See NOTE 1 to NOTE 4) 

5 Non-HSUPA in uphnk and HSDPA in downlink. (See NOTE 1 to NOTE 4) 

6 HSUPA in uplink and HSDPA in downhnk. (See NOTE 1 to NOTE 4) 

7 EPS (See NOTE 5) 

NOTE 1: The term "non-HSDPA" means a non-HSDPA UMTS bearer. 3GPP TS 25.331 [74] specifies the criterion 
to be satisfied in order for a downhnk UMTS RAB to be termed as HSDPA. If those criterion are not met, 
then the downhnk UMTS RAB would be termed as "non-HSDPA" by this AT conmiand. 

NOTE 2: The term "non-HSUPA" means a non-HSUPA UMTS bearer. 3GPP TS 25.331 [74] specifies the criterion 
to be satisfied in order for an uphnk UMTS RAB to be termed as HSUPA (or Enhanced uplink DCH). If 
those criterion are not met, then the uplink UMTS RAB would be termed as "non-HSUPA" by this AT 
conmiand. 

NOTE 3: The terms "non-HSDPA", "non-HSUPA" indicate R99 to pre- HSDPA or pre-HSUPA UMTS bearers. 
They do not imply GPRS or EGPRS bearers. 

NOTE 4: See 3GPP TS 25.308 [72] for HSDPA and 3GPP TS 25.319 [73] for HSUPA. 

NOTE 5: The term "EPS" means an EPS bearer (see 3GPP TS 36.331 [86]). 
Implementation 
Optional. 
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7.30 Calling name identification presentation +CNAP 



Table 59D: +CNAP parameter command syntax 



Command 


Possible response(s) 


+CNAP= [<n>] 




+CNAP? 


+CNAP: <n>,<ni> 


+CNAP=? 


+CNAP : (list of supported <n>s) 



Description 

This command refers to the GSM/UMTS supplementary service CNAP (Calling Name Presentation) that enables a 
called subscriber to get a calling name indication (CNI) of the calling party when receiving a mobile terminated call. Set 
command enables or disables the presentation of the CNI at the TE. It has no effect on the execution of the 
supplementary service CNAP in the network. 

When the presentation of the CNI at the TE is enabled (and CNI is provided), 

+CNAP: <name> [ , <CNI validity>] responseisreturnedaftereveryRINGresultcodesentfromTAtoTE.lt 
is manufacturer specific if this response is used when normal voice call is answered. 

Read command gives the status of <n>, and also triggers an interrogation of the provision status of the CNAP service 
according 3GPP TS 22.096 [93] (given in <in>).Test conamand returns values supported as a compound value. 

Defined values 

<n>: integer type (parameter sets/shows the result code presentation status to the TE) 

disable 

1 enable 

<m>: integer type (parameter shows the subscriber CNAP service status in the network) 

CNAP not provisioned 

1 CNAP provisioned 

2 unknown (e.g. no network, etc.) 

<name>: string type, up to 80 characters long string containing the calling name 
<CNI validity>: integer type 

CNI vaUd 

1 CNI has been withheld by the originator. 

2 CNI is not available due to interworking problems or limitations of originating network. 

When CNI is not available ( <CNI validity>=2), <name> shall be an empty string (""). 

When CNI has been withheld by the originator, (<CNI validity>=l) and the CNAP is provisioned with the 
"override category" option (refer 3GPP TS 22.096 [93] and 3GPP TS 23.096 [94]), <name> is provided. Otherwise, 
TA shall return the same setting for <name> as if the CNI was not available. 

Implementation 

Optional. 
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7.31 Connected line identification restriction status +COLR 



Table 59E: +COLR action command syntax 



Command 


Possible response(s) 


+ COLR 


+COLR: <ni> 


+COLR=? 





Description 

This command refers to the GSM/UMTS supplementary service COLR (Connected Line Identification Restriction) that 
enables a called subscriber to restrict the possibihty of presentation of connected hne identity (COL) to the calling party 
after receiving a mobile terminated call. The command displays the status of the COL presentation in the network. It has 
no effect on the execution of the supplementary service COLR in the network. 

The command triggers an interrogation of the activation status of the COLR service according 3GPP TS 22.081 [3] 
(given in <in>). 

Activation, deactivation, registration and erasure of the supplementary service COLR are not applicable. 
Defined values 

<m>: integer type (parameter shows the subscriber COLR service status in the network) 

COLR not provisioned 

1 COLR provisioned 

2 unknown (e.g. no network, etc.) 
Implementation 

Optional. 

7.32 Service Specific Access Control restriction status +CSSAC 



Table 7.32-1 : +CSSAC action command syntax 



Command 


Possible response(s) 


+CSSAC 


+CSSAC : <BFVoice> , <BFVideo> , <BTVoice> , < 
BTVoice> 


+CSSAC=? 





Description 

This connmand refers to SSAC (Service Specific Access Control) related information which is used by MMTEL 
application (see 3GPP TS 24.173 [87]). The command provides the current status of the parameters for SSAC, 
<BFVoice>, <BFVideo>, <BTVoice> and <BTVideo>. The AT command has no effect on the execution of 
SSAC. 

Defined values 

<BFVoice> integer type; (parameter shows the barring factor for MMTEL voice. <BFVoice> is mapped to the 
BarringFactorForMMTEL- Voice as in table 7.32-2.) 
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Table 7.32-2: Value of BFVoice and its interpretation by lUIMTEL application 



<Dr VOIC6> 
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<BFVideo> integer type (parameter shows the barring factor for MMTEL video. <BFVoice> is mapped to the 
BarringFactorForMMTEL- Video as in table 7.32-3.) 

Table 7.32-3: Value of BFVideo and its interpretation by lUIMTEL application 



<BFVideo> 


BarringFactorForMMTEL-Video 

as specified in 
3GPP TS 24.173 [87] 








1 


0,05 


2 
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3 
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<BTVoice> integer type; (parameter shows the barring timer for MMTEL voice. <BTVoice> is mapped to the 
BarringTimeForMMTEL- Voice as in table 7.32-4) 

Table 7.32-4: Value of BTVoice and its interpretation by MMTEL application 



<BTVoice> 



BarringTimeForMMTEL-Volce as 
specified in 3GPP TS 24.173 [87] 
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n 
u 


u 


■1 
1 


A 


2 


8 


3 


16 


4 


32 


5 


64 


6 
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7 
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8 


512 



<BTVideo> integer type; (parameter shows the barring timer for MMTEL video. <BFVideo> is mapped to the 
BarringTimeForMMTEL- Video as in table 7.32-5) 

Table 7.32-5: Value of BTVideo and its interpretation by IVIMTEL application 



<BTVideo> 


BarringTimeForMMTEL-Video as 




specified in 3GPP TS 24.173 [87] 








1 


4 


2 


8 


3 


16 


4 


32 


5 


64 


6 


128 


7 


256 


8 


512 



Implementation 

Optional. 

This command is not applicable to UTRAN or GERAN UEs. 

7.33 Network Emergency Bearer Services Support +CNEM 



Table 7:33-1 : +CNEM parameter command syntax 



Command 


Possible response(s) 


+CNEM= [<reporting>] 


+CME ERROR: <err> 


+CNEM? 


+CNEM: <reporting> [, <emb_Iu_supp> , <e 
inb_Sl_supp>] 


+CNEM=? 





Description 

Set command enables reporting of changes in the emergency bearer services support indicators with the unsolicited 
result code +CNEMIU : <emb_Iu_supp> according to the network featiu'e support information element, see 
3GPP TS 24.008 [8] subclause 10.5.5.23 and the unsolicited result code +CNEMS1 : <einb_Sl_supp> according to 
the EPS network feature support information element, see 3GPP TS 24.301 [83] subclause 9.9.3. 12A. 

Read command returns current command setting and if enabled, the settings of the emergency bearer services support 
indicator in lu mode and the emergency bearer services support indicator in SI mode for the network where the UE is 
attached. 

Defined values 

<reporting>: integer type 

Reporting not enabled 

1 Reporting enabled 
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<emb_Iu_supp>: integer type. Emergency bearer services support indicator for lu mode (See NOTE). 

Emergency bearer services in lu mode and A/Gb mode not supported 

1 Emergency bearer services supported in lu mode, but not supported in A/Gb mode 
<emb_Sl_supp>: integer type. Emergency bearer services support indicator for SI mode (See NOTE). 

Emergency bearer services in S 1 mode not supported 

1 Emergency bearer services in SI mode supported 

NOTE: The indicators <emb_Iu_supp> and <emb_Sl_supp> are only set to supported when exphcitly 

signalled from the network. When an emergency bearer services support indicator is not signalled from 
the network or if no network is available, this is interpreted as "Emergency bearer services not 
supported". 

Implementation 

Optional. 



7.34 Informative examples 



This subclause includes all the GSM/UMTS supplementary service related conmiands, additional connmands to lock 
MT and SIM/UICC capabilities, and connmands to check the network registration status. 

An example where MSISDNs of a MT are queried, calls are forwarded to different numbers when mobile is busy (CFB) 
or when it does not answer (CFNRy). The status of CFNRy is read: 



AT+CNUM 

+CNUM: , "+358501234567" , 145, ,4 (voice number) 

OK 

AT+CCFC=1, 1, "931123456" (enable CFB) 

OK 

AT+CCFC=2,1, "921654321" (enable CFNRy) 

OK 

AT+CCFC=1,2 (query CFNRy) 

+CCFC: 1,7, "+35821654321",145, , ,20 (forward after 20 seconds) 

OK 



An example of Call Waiting (+CCWA), Call Related Supplementary Services (+CHLD), and Connected Line 
Identification Presentation (+COLP) usage: 

AT+ CCWA= 1,1;+ COLP= 1 (enable call waiting and COLP result codes) 

OK 

ATD9311234567; (originate avoicecaU) 

+COLP: "+358311234567" , 145 

OK 

...conversation... 

+CCWA: "+358317654321" , 145 (another call is waiting) 

AT+CHLD=2 (put first call on hold and answer the second one) 

OK 

...conversation... 

AT+CHLD=1 (release the second (active) call and recover the first (held) call) 

OK 

ATH (release the first call) 

OK 



Call barring supplementary services are combined in one command, FaciUty Lock (+CLCK), which is also used to 
restrict MT and SIM/UICC functionality Some of the facilities require a password when enabled or disabled. An 
additional command. Change Password (+CPWD), is defined for changing the password of different barring and 
restriction facilities. An example where locking status of outgoing international calls is interrogated and then barred, 
and the password of the SIM/UICC card lock (Personal Identity Number, PIN) is changed: 

AT+CLCK="0I",2 
+CLCK: 0,7 
OK 

AT+CLCK="0I" ,1, "1234" 
OK 
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AT+CPWD="SC" , "4321" , "1234" 
OK 

Operator Selection (+COPS) command is used for querying the status of all GSM/UMTS operators detected in the area, 
and switching between operators. 

Following example illustrates a network selection sequence in Finland. Two operators are found, the status of Tele is 

unknown and Radiolinja is currently selected. Read command shows that automatic selection mode is on and that 
Radiolinja is selected. Then an attempt is made to access Tele, but it is denied (shown by +CME ERROR). 

AT+COPS=? 

+COPS: (2, "RADIOLINJA", "RL" , "24405") , (0, "TELE", "TELE", "24491") 

OK 

AT+COPS? 

+COPS: , , "RADIOLINJA" 
OK 

AT+C0PS=1, 0, "TELE" 
+CME ERROR: 3 

When a terminal wanders between countries (i.e. networks), an application may follow this e.g. with the following 
scenario: 

AT+CREG=1 (enable +CREG : <stat> unsolicited result code) 

OK 

AT+CREG? 

+CREG: 1,1 (MT is registered in home PLMN) 

OK 

AT+C0PS=3 , 2 ; +COPS? ; +C0PS=3 , ; +COPS? 

+ C0PS: 0,2, "24405" (get the country... 

+C0PS : 0,0," RADIOLINJA" ...and operator name) 

OK 

...user wanders to another PLMN... 

+CREG: 2 (deregistered, roaming ongoing) 

+CREG : 5 (registered again, not home PLMN) 

AT+C0PS=3 , 2 ; +COPS? ; +C0PS=3 , ; +COPS? 

+COPS: 0,2, "24001" (get the country... 

+COPS: 0,0, "TELIA MOBITEL" ...and operator name) 

OK 

...user loses connection, no other PLMNs around... 
+CREG: 

An example of eMLPP Supplementary Service usage for a ptp voice call: 

ATD* 7 52 #+4 3 6 644 10 14 53 ; (originate a voice call with the priority level 2, see for priority level definitions GSM 02.30) 

OK (call setup was successful) 



8 Mobile Termination control and status commands 
8.0 General 

This clause includes conmiands for MT power, keypad, touch screen, display and indicator handling. Also commands 
for selecting, reading and writing of phonebooks, and setting real-time clock facilities are specified. Two commands are 
specified for accessing SIM/UICC database records in a general way. 

Figure 7 illustrates the effect of these commands. Command Phone Activity Status +CPAS indicates the current general 
activity status of the MT. Command Set Phone Functionality +CFUN is used to set the MT to different power 
consumption states. Command Enter PIN +CPIN is used to enter MT passwords which are needed before any other 
functionaUty of the MT can be used (e.g. SIM PIN, PUK). Commands Generic SIM Access +CSIM and Restricted SIM 
Access +CRSM can be used to access all data in SlM/UlCC. Commands Battery Charge +CBC and Signal Quality +CSQ 
are same as in TIA IS- 135 [16] and they are used to query the battery charge of the MT and the current RSSl of the MT. 
Command Mobile Termination Control Mode +CMEC is used to select the controlling unit of MT keypad, display touch 
screen, and indicators. Controlling commands for the TE are Keypad Emulation +CKPD, Display Control +CDIS , 
Touch Screen Emulation +CTSA, and Indicator Control +CIND. If corresponding event reporting is enabled with 
command Mobile Termination Event Reporting +CMER, +CKEV is the result code of a keypad event, +CDEV is the 
result code of a display event, +CTEV is the result code of a touch screen event, and +CIEV is the result code of an 
indicator event. Phonebook commands are Select Phonebook Memory Storage +CPBS, Read Phonebook Entries 
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+ CPBR, Find Phonebook Entries +CPBF and Write Phonebook Entry +CPBW. Additional command Clock +CCLK can 
be used to control the real-time clock of the MT if available. Command Alarm +CALA sets possible alarm clock 
facilities of the MT. 



SIM IF, 

PASSWORD 

FACILITIES 



KEYPAD 



DISPLAY 



INDICATORS 



INDICATORS 



PHONE- 
BOOKS 



MT 



+CKEV 



+CDEV 



+CIEV 



+CIEV 



+CPAS 

> 

+CFUN 



+CPIN, +CSIM, -i-CRSM 



+CBC 

+CSQ 

> 

+CMEC 



■i-CKPD 



> 

+CDIS 

> 



> 

+CIN D 

> 

+CIN D 

> 

+CMER 



+CPBS 



+CPBR, +CPB F 



+CPBW 



+CCLK, +CALA 

> 

TA TE 



Figure 7: lUlobiie termination control and status commands 
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8.1 Phone activity status +CPAS 



Table 60: +CPAS action command syntax 



Command 


Possible response(s) 


+CPAS 


+CPAS: <pas> 

+CME ERROR: <err> 


+CPAS=? 


+CPAS: (listof supported < p a s > s ) 
+CME ERROR: <err> 



Description 

Execution command returns the activity status <pas > of the MT. It can be used to interrogate the MT before requesting 
action from the phone. Refer subclause 9.2 for possible <err> values. 

Test command returns values supported by the MT as a compound value. 

Defined values 

<pas>: integer type 

ready (MT allows connmands from TA/TE) 

1 unavailable (MT does not allow commands from TA/TE) 

2 unknown (MT is not guaranteed to respond to instructions) 

3 ringing (MT is ready for commands from TA/TE, but the ringer is active) 

4 call in progress (MT is ready for commands from TA/TE, but a call is in progress) 

5 asleep (MT is imable to process commands from TA/TE because it is in a low functionality state) 
aU other values below 128 are reserved by the present document. 

Implementation 

Mandatory when MT can be operated from TE (refer subclause "Mobile Termination control mode +CMEC"). 

8.2 Set phone functionality +CFUN 



Table 61 : +CFUN parameter command syntax 



Command 


Possible response(s) 


+CFUN= [<fun> [ , <rst>] ] 


+CME ERROR: <err> 


+CFUN? 


+CFUN: <fun> 
+CME ERROR: <err> 


+CFUN=? 


+CFUN: (list of supported <fun>s) , (list of supported <rst>s) 
+CME ERROR: <err> 



Description 

Set command selects the level of functionaUty <f un> in the MT. Level "fuU functionaUty" is where the highest level of 
power is drawn. "Minimum functionality" is where minimum power is drawn. Level of functionality between these may 
also be specified by manufacturers. When supported by manufacturers, MT resetting with <rst> parameter may be 
utilized. Refer subclause 9.2 for possible <err> values. 
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NOTE 1: It is manufacturer specific if this command affects network registration. Command Operator Selection 
+COPS is used to force registration/deregistration. 

Test command returns values supported by the MT as a compound value. 

Defined values 

<f un>: integer type 

minimum functionality 

1 full functionality 

2 disable phone transmit RF circuits only 

3 disable phone receive RF circuits only 

4 disable phone both transmit and receive RF circuits 

5... 127 reserved for manufacturers as intermediate states between full and minimum fimctionality 
<rst>: integer type 

do not reset the MT before setting it to < f un> power level 
NOTE 2: This shall be always default when <rst > is not given. 

1 reset the MT before setting it to < fun > power level 
Implementation 

Optional. 

8.3 Enter PIN +CPIN 



Table 62: +CPIN parameter command syntax 



Command 


Possible response(s) 


+CPIN=<pin> [ , <newpin>] 


+CME ERROR: <err> 


+CPIN? 


+CPIN: <code> 
+CME ERROR: <err> 


+CPIN=? 





Description 

Set command sends to the MT a password which is necessary before it can be operated (SIM PIN, SIM PUK, PH-SIM 
PIN, etc.). If the PIN is to be entered twice, the TA shall automatically repeat the PIN. If no PIN request is pending, no 
action is taken towards MT and an error message, +CME ERROR, is returned to TE. Refer subclause 9.2 for possible 
<err> values. 

NOTEl: SIM PIN, SIM PUK, PH-SIM PIN, PH-FSIM PIN, PH-FSIM PUK, SIM PIN2 and SIM PUK2 
refer to the PIN of the selected application on the UICC. For example, in an UTRAN context, the selected 
application on the currently selected UICC should be a USIM and the SIM PIN then represents the PIN 
of the selected USIM. See 3GPP TS 31.101 [65] for further details on appUcation selection on the UICC. 

If the PIN required is SIM PUK or SIM PUK2, the second pin is required. This second pin, <newpin>, is used to 
replace the old pin in the SIM. 

NOTE 2: Commands which interact with MT that are accepted when MT is pending SIM PIN, SIM PUK, or 
PH-SIM are: +CGMI, +CGMM, +CGMR, +CGSN, D112 ; (emergency call), +CPAS, +CFUN, +CPIN, 
+CPINR, +CDIS (read and test command only), and +CIND (read and test command only). 
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Read command returns an alphanumeric string indicating whether some password is required or not. 
Defined values 

<pin>, <newpin>: string type values 

<code> values reserved by the present document: 



READY 
SIM PIN 
SIM PUK 
PH-SIM PIN 
PH-FSIM PIN 
PH-FSIM PUK 
SIM PIN2 



SIM PUK2 



PH-NET PIN 
PH-NET PUK 
PH-NETSUB PIN 



MT is not pending for any password 

MT is waiting SIM PIN to be given 

MT is waiting SIM PUK to be given 

MT is waiting phone-to-SIM card password to be given 

MT is waiting phone-to- very first SIM card password to be given 

MT is waiting phone-to-very first SIM card unblocking password to be given 

MT is waiting SIM PIN2 to be given (this <code> is recommended to be returned only 
when the last executed command resulted in PIN2 authentication failure (i.e. +CME 
ERROR : 1 7); if PIN2 is not entered right after the failure, it is recommended that MT 
does not block its operation) 

MT is waiting SIM PUK2 to be given (this <code> is recommended to be returned only 
when the last executed command resulted in PUK2 authentication failure (i.e. +CME 
ERROR : 1 8); if PUK2 and new PIN2 are not entered right after the failure, it is 
recommended that MT does not block its operation) 

MT is waiting network personalization password to be given 

MT is waiting network personalization unblocking password to be given 

MT is waiting network subset personalization password to be given 



PH-NETSUB PUK MT is waiting network subset personalization unblocking password to be given 



PH-SP PIN 
PH-SP PUK 
PH-CORP PIN 
PH-CORP PUK 



MT is waiting service provider personahzation password to be given 

MT is waiting service provider personahzation unblocking password to be given 

MT is waiting corporate personalization password to be given 

MT is wailing corporate personalization unblocking password to be given 



Implementation 

Mandatory for MT not supporting the +CKPD command and supporting AT commands only. 

8.4 Battery charge +CBC 

Table 63: +CBC action command syntax 



Command 


Possible response(s) 


+CBC 


+CBC: <bcs>,<bcl> 
+CME ERROR: <err> 


+CBC=? 


+CBC : (list of supported <bcs>s) , (hst of supported <bcl>s) 



Description 
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Execution command returns battery connection status <bcs> and battery charge level <bcl> of the MT. Refer 
subclause 9.2 for possible <err> values. 

Test command returns values supported as compound values. 

Defined values 

<bcs>: integer type 

MT is powered by the battery 

1 MT has a battery connected, but is not powered by it 

2 MT does not have a battery connected 

3 Recognized power fault, calls inhibited 
<bcl>: integer type 

battery is exhausted, or MT does not have a battery connected 

1 ... 1 00 battery has 1 - 1 00 percent of capacity remaining 
Implementation 
Optional. 

8.5 Signal quality +CSQ 



Table 64: +CSQ action command syntax 



Command 


Possible response(s) 


+ CSQ 


+CSQ: <rssi>,<ber> 
+CME ERROR: <err> 


+CSQ=? 


+CSQ : (list of supported <rssi>s) , (hst of supported <ber>s) 



Description 

Execution command returns received signal strength indication < r s s i > and channel bit error rate <ber > from the 
MT. Refer subclause 9.2 for possible <err> values. 

Test command returns values supported as compound values. 

Defined values 

< r s s i > : integer type 

-113 dBm or less 

1 -111 dBm 
2...30 -109... -53 dBm 
31 -51 dBm or greater 

99 not known or not detectable 
<ber>: integer type; channel bit error rate (in percent) 

0...7 as RXQUAL values in the table in 3GPP TS 45.008 [20] subclause 8.2.4 
99 not known or not detectable 
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Implementation 

Optional. 

8.6 Mobile Termination control mode +CMEC 



Table 65: +CMEC parameter command syntax 



Command 


Possible response(s) 


+CMEC= [<keyp> [ , <disp> [ , <ind> [ , < 

tscrn>] ] ] 


+CME ERROR: <err> 


+CMEC? 


+CMEC: <keyp>, <disp>, <ind>, <tscrn> 


+CMEC=? 


+CMEC: {list of supported <keyp>s) , (Ustof 
supported <disp>s) , (list of supported 
<ind>s) , (list of supported <tscrn>s) 



Description 

Set command selects the equipment, which operates MT keypad, writes to MT display and sets MT indicators. If 
operation mode is not allowed by the MT, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Test command returns the modes supported as compound values. 

Defined values 

<keyp>: integer type 

MT can be operated only through its keypad (execute command of +CKPD cannot be used) 

1 MT can be operated only from TE (with command +CKPD) 

2 MT can be operated from both MT keypad and TE 

<disp>: integer type 

only MT can write to its display (command +CDIS can only be used to read the display) 

1 only TE can write to MT display (with command +CDIS) 

2 MT display can be written by both MT and TE 
< ind>: integer type 

only MT can set the status of its indicators (command +CIND can only be used to read the indicators) 

1 only TE can set the status of MT indicators (with command +CIND) 

2 MT indicators can be set by both MT and TE 
<tscrn>: integer type 

only MT can set the status of its indicators (execute command of +CTSA cannot be used) 

1 only TE can set the status of MT indicators (with connmand +CTSA) 

2 MT indicators can be set by both MT and TE 
Implementation 

Mandatory when any of keypad, display or indicator or touch screen commands is implemented. 
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8.7 Keypad control +CKPD 



Table 66: +CKPD action command syntax 



Command 


Possible response(s) 


+CKPD=<keys> [ , <time> [ , <pause>] ] 


+CME ERROR: <err> 


+CKPD=? 





Description 

Execution command emulates MT keypad by giving each keystroke as a character in a string <keys>. <tiine>*0.1 
seconds is the time to stroke each key and <pause>*0.1 seconds is the length of pause between two strokes. If 
emulating fails in an MT error, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err > values. This 
command should be accepted (OK returned) before actually starting to press the keys. Thus unsolicited result codes of 
key pressings and display events can be returned (refer subclause "Mobile Termination event reporting +CMER"). 

Defined values 

<keys>: string of characters representing keys as Usted in the following table 67 (based on PCCA STD-101 [17] 

Annex I table 1-3). Colon character (IRA 58) followed by one character can be used to indicate a manufacturer 
specific key not listed here. All characters from a semicolon character (IRA 59) to the next single semicolon 
character are treated as alpha entries and are not converted to key equivalents. All semicolon characters inside 
alpha entries should be duphcated in the TE and stripped to one before entering to the MT. Pause character (IRA 
87 or 1 19) can be used to pause between key pressings for a time specified by <pause>. All IRA values not 
hsted here are reserved. 



Table 67: Character codes 



Char 


IRA (dec) 


Comment (+ some known key symbols) 


# 


35 


hash (number sign) 


% 


37 


percent sign (P) 


* 


42 


star (*) 


0...9 


48... 57 


number keys 




58 


escape character for manufacturer specific keys 




59 


escape character for string entering 


< 


60 


left arrow 


> 


62 


right arrow 


@ 


64 


alpha key (oc/ABC) 


A/a 


65/97 


channel A (A) 


B/b 


66/98 


channel B (B) 


C/c 


67/99 


clear display (C/CLR) 


D/d 


68/100 


volume down 


E/e 


69/101 


connection end (END) 


F/f 


70/102 


function (FCN) 


L/1 


76/108 


phone lock (LOCK) 


M/m 


77/109 


menu (MENU) 


P/p 


80/112 


power (PWR) 


Q/q 


81/113 


quiet/mute (MUTE) 


R/r 


82/114 


recall lasl number (R/RCL/MR) 


S/s 


83/115 


connection start (SEND) 


T/t 


84/116 


store/ memory (STO/M/M+) 


U/u 


85/117 


volume up 


V/v 


86/118 


down arrow 


W/w 


87/119 


pause character 


X/x 


88/120 


auxihary (AUX) 


Y/y 


89/121 


delete last character (C) 
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Char 


IRA (dec) 


Comment (+ some known key symbols) 


[ 


91 


soft key 1 


] 


93 


soft key 2 


A 


94 


up arrow 



<time>, <pause>: integer type 

0...255 0... 25.5 seconds (default values are manufacturer specific, but should be so long that a normal MT 
can handle keystrokes correctly) 

Implementation 

Mandatory for MT not supporting the +CPIN command and supporting AT commands only. 

8.8 Display control +CDIS 



Table 68: +CDIS parameter command syntax 



Command 


Possible response(s) 


+CDIS= [<text> [ , <text> [,...]]] 


+CME ERROR: <err> 


+CDIS? 


+CDIS: <text> [, <text> [,...] ] 

+CME ERROR: <err> 


+CDIS=? 


+CDIS: <length> [, <length> [,...] ] 
+CME ERROR: <err> 



Description 

Set command is used to write the contents of MT text type display elements. An element can consist of one character or 
several characters. The order of element parameters <text > should follow the rule: first is the element in upper left 
corner, second is the next element to the right and so on. The last element is the element in lower right corner. The 
number of elements is MT specific. If MT does not allow writing to its display or MT is not currently reachable, 
+CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. If certain element is not writable, setting 
of it should be ignored. If element parameter is empty field, element shall remain in the previous value. 

NOTE 1: This conmiand cannot be used to write to a display which sum of element lengths exceed the length of the 
command line buffer of the TA. 

Read command returns the contents of MT display elements. If <text> field is empty (not empty string), MT does not 
allow the reading of corresponding element. If MT is not currently reachable, +CME ERROR : <err > is returned. 
Refer subclause 9.2 for <err> values. 

Test command returns maximum length of each display element. If MT does not offer the length of elements, 
< length> fields should be empty. If MT is not currently reachable, +CME ERROR : <err> is returned. Refer 

subclause 9.2 for <err> values. 

NOTE 2: MT manufacturer should offer the order and maximum length of elements. 
Defined values 

<text>: string type parameter using character set specified by command Select TE Character Set +CSCS 
<length>: integer type parameter giving the maximum length of corresponding <text > parameter 

Implementation 

Optional. 
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8.9 Indicator control +CIND 



Table 69: +CIND parameter command syntax 



Command 


Possible response(s) 


+CIND= [<ind> [,<ind> [,...]]] 


+CME ERROR: <err> 


+CIND? 


+CIND: <ind> [,<ind> [,...] ] 

+CME ERROR: <err> 


+CIND=? 


+CIND: (<descr> , (list of supported 
<ind>s) ) [, {<descr>, (list of supported 
<ind>s) ) [,...]] 

+CME ERROR: <err> 



Description 

Set command is used to set the values of MT indicators. < ind> value means that the indicator is off (or in state 
which can be identified as "off"-state), 1 means that indicator is on (or in a state which is more substantial than 
"off-state), 2 is more substantial than 1, and so on. If the indicator is a simple on/off style element, it has values and 
1. The number of elements is MT specific. If MT does not allow setting of indicators or MT is not currently reachable, 
+CME ERROR : <err> is returned. Refer subclause 9.2 for <err > values. If certain indicator is not writable, setting 
of it should be ignored. If parameter is empty field, indicator shall remain in the previous value. 

Read command returns the status of MT indicators. If MT is not currentiy reachable, +CME ERROR : <err> is 
returned. Refer subclause 9.2 for <err> values. 

Test command returns pairs, where string value <descr> is a maximum 16 character description of the indicator and 
compound value is the allowed values for the indicator. If MT is not currently reachable, +CME ERROR : <err > is 
returned. Refer subclause 9.2 for <err> values. 

NOTE: MT manufacturer should offer the description of supported indicators not listed here and their value 
ranges and default values. 

Defined values 

<ind>: integer type value, which shall be in range of corresponding <descr> 
<descr> values reserved by the present document and their <ind> ranges: 



battchg" 


battery charge level (0-5) 


signal" 


signal quality (0-5) 


service" 


service avaUabiUty (0-1) 


sounder" 


sounder activity (0-1) 


message " 


message received (0-1) 


call" 


call in progress (0-1) 


vox" 


transmit activated by voice activity (0-1) 


roam" 


roaming indicator (0-1) 


smsfull" 


a short message memory storage in the MT has become full and a short message has been 




rejected (2), has become fuU (1), or memory locations are available (0); i.e. the range is (0-2) 


inputstatus " 


keypad/touch screen status (0-1) 



Implementation 
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Optional. 

8.10 Mobile Termination event reporting +CI\/IER 



Table 70: +CMER parameter command syntax 



Command 


Possible response(s) 


+CMER= [<mode> [ , <keyp> [ , <disp> 
[ , <ind> [ , <bf r>> [ , <tscrn] ] ] ] ] 


+CME ERROR: <err> 


+CMER? 


+CMER: <mode>, <keyp>, <disp>, <ind>, <bfr>, <tscr 

n> 


+CMER=? 


+CMER: (list of supported <mode>s) , (list of supported 
<keyp>s) , (list of supported <disp>s) , (list of supported 
<ind>s) , (list of supported <bfr>s) , (list of supported 
<tscrn>s) 



Description 

Set command enables or disables sending of unsolicited result codes from TA to TE in the case of key pressings, 
display changes, and indicator state changes. <mode> controls the processing of unsolicited result codes specified 
within this command. <bf r> controls the effect on buffered codes when <niode> 1, 2 or 3 is entered. If setting is not 
supported by the MT, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Test command returns the modes supported as compound values. 

Defined values 

<mode>: integer type 

buffer unsolicited result codes in the TA; if TA result code buffer is full, codes can be buffered in some other 
place or the oldest ones can be discarded 

1 discard imsolicited result codes when TA-TE link is reserved (e.g. in on-line data mode); otherwise forward 
them directly to the TE 

2 buffer unsolicited result codes in the TA when TA-TE link is reserved (e.g. in on-line data mode) and flush 
them to the TE after reservation; otherwise forward them directly to the TE 

3 forward unsolicited result codes directly to the TE; TA-TE link specific inband technique used to embed 
result codes and data when TA is in on-line data mode 

<keyp>: integer type 

no keypad event reporting 

1 keypad event reporting using unsolicited result code +CKEV : <key> , <press>. <key> indicates the key 
(refer IRA values defined in table 67 in subclause "Keypad control h-CKPD") and <press> if the key is 
pressed or released (1 for pressing and for releasing). Only those key pressings, which are not caused by 
+CKPD shall be indicated by the TA to the TE. 

NOTE 1: When this mode is enabled, corresponding result codes of all keys currently pressed should be flushed to 
the TA regardless of <bf r> setting. 

2 keypad event reporting using unsolicited result code +CKEV: <key> , <press>. All key pressings shall be 
directed from TA to TE. 

NOTE 2: When this mode is enabled, corresponding result codes of all keys currently pressed should be flushed to 
the TA regardless of <bf r> setting. 

<disp>: integer type 

no display event reporting 
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1 display event reporting using unsolicited result code +CDEV : <elem> , <text>. <elem> indicates the 
element order number (as specified for +CDIS) and <text> is the new value of text element. Only those 
display events, which are not caused by +CDIS shall be indicated by the TA to the TE. Character set used in 
<text> is as specified by command Select TE Character Set +CSCS 

2 display event reporting using unsolicited result code +CDEV: <eleni>, <text>. All display events shall 
be directed from TA to TE. Character set used in <text > is as specified by command Select TE Character 

Set +CSCS 

<ind>: integer type 

no indicator event reporting 

1 indicator event reporting using unsolicited result code +CIEV: <ind>, <value>. <ind> indicates the 
indicator order number (as specified for +CIND) and <value> is the new value of indicator. Only those 
indicator events, which are not caused by +CIND shall be indicated by the TA to the TE 

2 indicator event reporting using unsolicited result code +CIEV: <ind>,<value>. All indicator events 
shall be directed from TA to TE 

<bf r>: integer type 

TA buffer of unsolicited result codes defined within this command is cleared when <Tnode> 1...3 is entered 

1 TA buffer of unsolicited result codes defined within this command is flushed to the TE when <mode> 1...3 
is entered (OK response shall be given before flushing the codes) 

< t s c r n > : integer type 

no touch screen event reporting 

1 touch screen event reporting using unsolicited result code +CTEV : <action> , <x> , <y>. The <x>,<y> 
parameters indicate the x, y coordinates on the touch screen device (as specified for +CTSA), and 

< act ion > indicates the action performed on the screen (0 for screen released, 1 for screen depressed, 2 for 
single tap, and 3 for double tap). Only those touch screen events, which are not caused by +CTSA shall be 
indicated by the TA to the TE. 

NOTE 3: When this mode is enabled, corresponding result codes of all touch screen actions should be flushed to 

the TA regardless of <bf r> setting. 

2 touch screen event reporting using unsoUcited result code +CTEV : <act ion> , <x> , <y>. All touch 
screen events shall be directed from the TA to the TE. 

NOTE 4: When this mode is enabled, corresponding result codes of all touch screen actions should be flushed to 
the TA regardless of <bf r> setting. 

3 Verbose mode. Touch screen event reporting using unsolicited result code 

+CTEV : <action> , <x> , <y>. This is a special mode where intermediate depressed result codes 
(+CTEV : <x> , <y>, depressed) are generated for each new <x>,<y> coordinate detected while a user is 
dragging a touch to a new location. All other touch screen actions shall be directed from the TA to the TE 
normally. Only those touch screen events which are not caused by +CTSA shall be indicated by the TA to the 
TE. 

NOTE 5: When this mode is enabled, corresponding result codes of all touch screen actions should be flushed to 
the TA regardless of <bf r> setting. 

Implementation 

Mandatory when any of the keypad, display, or indicator, or touch screen result codes is implemented. 
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8.1 1 Select phonebook memory storage +CPBS 



Table 71 : +CPBS parameter command syntax 



Command 


Possible response(s) 


+CPBS=<storage> [ , <password>] 


+CME ERROR: <err> 


+CPBS? 


+CPBS : <storage> [ , <used>, <total>] 

+CME ERROR: <err> 


+CPBS=? 


+ CPBS : (lisl of supported <storage>s) 



Description 

Set command selects phonebook memory storage <storage>, which is used by other phonebook commands. If 
setting fails in an MT error, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Read command returns currently selected memory, and when supported by manufacturer, number of used locations and 
total number of locations in the memory. 

Test command returns supported storages as compound value. 

Defined values 

<storage> values reserved by the present document: 

" DC " MT dialled calls list (+CPBW may not be applicable for this storage) 

" EN " SIM/USIM (or MT) emergency number (+CPBW is not be applicable for this storage) 

" FD " SIM/USIM fixdiaUing-phonebook. In the currently selected card slot, if a SIM card is present or if a 
UICC with an active GSM application is present, the information in EFrdn under DFxeiecom is selected. 
If a UICC with an active USIM application is present, the information in EFfdn under ADFusmiis 
selected. 

" LD " SIM/UICC last-dialling-phonebook 

" MC " MT missed (unanswered received) calls list (+CPBW may not be apphcable for this storage) 
"ME" MT phonebook 

" MT " combined MT and SIM/USIM phonebook 

" ON " SIM (or MT) own numbers (MSISDNs) hst (reading of this storage may be available through +CNUM 
also). When storing information in the SIM/UICC, if a SIM card is present or if a UICC with an active 

GSM application is present, the information in EFmsisdn under DFxeiecom is selected. If a UICC with an 
active USIM application is present, the information in EFmsisdn under ADFusim is selected. 

" RC " MT received calls list (+CPBW may not be apphcable for this storage) 

" SM" SIM/UICC phonebook. In the currently selected card slot, if a SIM card is present or if a UICC with 
an active GSM application is present, the EFadn under DExeiecom is selected. If a UICC with an active 
USIM apphcation is present, the global phonebook, DFphonebook under DExeiecomis selected. 

"TA" TA phonebook 

"AP" Selected application phonebook. In the currently selected card slot, if a UICC with an active USIM 
application is present, the application phonebook, DFphonebook under ADFusim is selected. 

<password>: string type value representing the PIN2-code required when selecting PIN2-code locked 

< storage >s above, e.g. "FD" or the hidden key to be verified in order to access to the hidden phonebook 
entries in the UICC/USIM or any other phonebook with hidden entries. 
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If the combined phonebook is selected, "MT", the <password> will correspond to the hidden key of the USIM 
phonebook. 

<used>: integer type value indicating the number of used locations in selected memory 
<total>: integer type value indicating the total number of locations in selected memory 
Implementation 

Mandatory when phonebook read, find or write command, or direct dialling (refer subclause "Direct dialling from 
phonebooks") is implemented. 

8.12 Read phonebook entries +CPBR 



Table 72: +CPBR action command syntax 



Command 


Possible response(s) 


+CPBR=<indexl> [ , <i 
ndex2 >] 


[+CPBR: <indexl> , <number> , <type> , <text> [ , <hidden>] [,<gro 
up>] [ , <adnumber>] [,<adtype>] [ , <secondtext>] [,<email>] [,< 
sip uri>] [,<tel uri>] ] 

[[...] 

[<CR><LF>+CPBR : <index2 > , <number> , <type> , <text> [ , <hidden 
>] [,<group>] [ , <adnumber>] [,<adtype>] [ , <secondtext>] [,<ein 
ail>] [,<sip_uri>] [ , <tel_uri>] ] ] 

+CME ERROR: <err> 


+CPBR=? 


+CPBR: {Hst of supported 

<index>s) , [<nlength>] , [<tlength>] , [<glength>] , [<slength> 
] , [<elength>] , [<siplength>] , [<tellength>] 

+CME ERROR: <err> 



Description 

Execution command returns phonebook entries in location number range < index 1 >... < index2 > from the current 
phonebook memory storage selected with +CPBS. If <index2> is left out, only location <indexl> is returned. Entry 
fields returned are location number <indexn>, phone number stored there <number> (of format <type>), text 
<text> associated with the number, if the selected phonebook supports hidden entries, <hidden> indicating if the 
entry is hidden, <group> indicating a group the entry may belong to, <adnumber> an additional number (of 
format <adtype>), <secondtext> a second text field associated with the number, <eniail> an email field, 
<sip_uri> SIP number and <tel_uri> TEL number. If all queried locations are empty (but available), no 
information text lines may be returned. If listing fails in an MT error, +CME ERROR : <err > is returned. Refer 
subclause 9.2 for <err> values. 

Test command returns location range supported by the current storage as a compound value and the maximum lengths 
of <number>, <text>, <group>, <secondtext>, <eTnail>, <sip_uri> and <tel_uri> fields. In case of 
(U)SIM storage, the lengths may not be available. If MT is not currently reachable, +CME ERROR : <err> is 
returned. Refer subclause 9.2 for <err> values. 

Defined values 

< indexl >, < index2 >, < index>: integer type values in the range of location numbers of phonebook memory 
<number>: string type phone number of fornoat <type> 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 

<text>: string type field of maximum length <tlength>; character set as specified by command Select TE 
Character Set +CSCS 
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<group>: string type field of maximum length <glength>; character set as specified by command Select TE 
Character Set +CSCS 

<adnumber>: string type phone number of format <adtype> 

<adtype>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 

<secondtext>: string type field of maximum length <slength>; character set as specified by conmiand Select 
TE Character Set +CSCS 

<email>: string type field of maximum length <elength>; character set as specified by conmiand Select TE 
Character Set +CSCS 

<sip_uri>: string type field of maximum length <siplength>; character set as specified by command Select 
TE Character Set +CSCS 

<tel_uri>: string type phone number of maximum length <tellength>; character set as specified by 
command Select TE Character Set +CSCS 

<nlength>: integer type value indicating the maximum length of field <number> 

<tlength>: integer type value indicating the maximum length of field <text> 

<glength>: integer type value indicating the maximum length of field <group> 

<slength>: integer type value indicating the maximum length of field < secondtext > 

<elength>: integer type value indicating the maximum length of field <email > 

<siplength>: integer type value indicating the maximum length of field <sip_uri> 

<tellength>: integer type value indicating the maximum length of field <tel_uri> 

<hidden>: integer type value indicates if the entry is hidden or not 

0: phonebook entry not hidden 

1 : phonebook entry hidden 

Implementation 

Optional. 

8.1 3 Find phonebook entries +CPBF 



Table 73: +CPBF action command syntax 



Command 


Possible response(s) 


+CPBF=<f indtext> 


[+CPBF: <indexl> , <number> , <type> , <text> [ , <hidden>] [,<group> 
] [ , <adnumber>] [,<adtype>] [ , <secondtext>] [,<email>] [,<sip_ur 
i>] [ , <tel_uri>] ] 

[<CR><LF>+CBPF : <index2 > , <number> , <type> , <text> [ , <hidden>] [ 
,< group >] [ , <adnuTnber>] [,<adtype>] [ , <secondtext>] [,<einail>] [ 
,<sip uri>] [,<tel uri>] 
[...]] 

+CME ERROR: <err> 


+CPBF=? 


+CPBF: [<nlength>] , [<tlength>] , [<glength>] , [<slength>] , [<el 
ength>] , [<siplength>] , [<tellength>] 

+CME ERROR: <err> 
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Description 

Execution command returns phonebook entries (from the current phonebook memory storage selected with +CPBS) 
which alphanumeric field start with string < f indtext >. Entry fields returned are location number < indexi2>, phone 
number stored there <nuniber> (of format <type>), text <text> associated with the nxunber, if the selected 
phonebook supports hidden entries, <hidden> indicating if the entry is hidden, <group> indicating a group the entry 
may belong to, <adnumber> an additional number (of format <adtype>), <secondtext> a second text field 
associated with the number, <email> an email field, <sip_uri> SIP number and <tel_uri> TEL number. If 
listing fails in an MT error, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Test command returns the maximum lengths of <nuinber>, <text>, <group>, <secondtext>, <email>, 
<sip_uri> and <tel_uri> fields. In case of (U)SIM storage, the lengths may not be available. If MT is not 
currently reachable, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Defined values 

< indexl >, < index2 >: integer type values in the range of location numbers of phonebook memory 
<number>: string type phone number of format <type> 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 |8| subclause 10.5.4.7) 

<group>: string type field of maximum length <glength>; character set as specified by command Select TE 
Character Set +CSCS 

<adnuTnber>: string type phone number of format <adtype> 

<adtype>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 

<secondtext>: string type field of maximum length <slength>; character set as specified by command Select 

TE Character Set +CSCS 

<email>: string type field of maximum length <elength>; character set as specified by command Select TE 
Character Set +CSCS 

<f indtext>, <text>: string type field of maximum length <tlength>; character set as specified by command 
Select TE Character Set +CSCS 

<sip_uri>: string type field of maximum length <siplength>; character set as specified by command Select 
TE Character Set +CSCS 

<tel_uri>: string type phone number of maximum length <tellength>; character set as specified by 
command Select TE Character Set +CSCS 

<nlength>: integer type value indicating the maximum length of field <nuniber > 

<tlength>: integer type value indicating the maximum length of field <text> 

<glength>: integer type value indicating the maximum length of field <group> 

<slength>: integer type value indicating the maximum length of field <secondtext> 

<elength>: integer type value indicating the mjiximum length of field <eniail > 

<siplength>: integer type value indicating the maximum length of field <sip_uri> 

<tellength>: integer type value indicating the maximum length of field <tel_uri> 

<hidden>: integer type value indicates if the entry is hidden or not 

0: phonebook entry not hidden 

I : phonebook entry hidden 

Implementation 
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8. 1 4 Write phonebook entry +CPBW 



Table 74: +CPBW parameter command syntax 



Command 


Possible response(s) 


+CPBW= [<index>] [ , <number> [ , <t 
ype> [ , <text> [ , <group> [ , <adnum 
ber> [ , <adtype> [ , <secondtext> [ 
, <einail> [ , <sip uri>[,<tel uri 
> [,<hidden>] ]]]]]]]]]] 


+CPBW: <written index> 
+CME ERROR: <err> 


+CPBW? 


+CPBW: <written index> 


+CPBW=? 


+ CPBW: (list of supported <index>s) , [<nlength>] , {list of 
supported 

<type>s) , [<tlength>] , [<glength>] , [<slength>] , [ 
<elength>] , [<siplength>] , [<tellength>] 

+CME ERROR: <err> 



Description 

Execution command writes phonebook entry in location number <index> in the current phonebook memory storage 
selected with +CPBS. Entry fields written are phone number <number> (in the format <type>), text <text> 
associated with the number, if the selected phonebook supports hidden entries, <hidden> parameter, which indicates if 
the entry is hidden or not, <group> indicating a group the entry may belong to, <adnumber> an additional 
number (of format <adtype>), <secondtext> a second text field associated with the number, < email > an 
email field, <sip_uri> SIP number and <tel_uri> TEL number. If all those fields are omitted, the phonebook 
entry is deleted. If <index> is left out, but <number> is given, the entry is written to the first free location in the 
phonebook (the implementation of this feature is manufacturer specific). For successfull writes where <index> is not 
given, the intermediate result code +CPBW : <written_index> may be provded to indicate the location the entry 
was written to. If writing fails in an MT error, +CiyiE ERROR : <err > is returned. Refer subclause 9.2 for <err> 
values. 

Read command returns the last <written_index> value, or -1 if information about previous value is not available. 

NOTE: Changing the current phonebook memory storage with +CPBS to another storage invalidates the last 
<written_index> value. 

Test command returns location range supported by the current storage as a compound value, the maximum length of 

<number> field, supported number formats of the storage, the maximum length of <text> field, the maximum 
length of <group>, the maximum length of <secondtext>, the maximum length of <email>, the maximum 
length of <sip_uri> and the maximum length of <tel_uri>. In case of SIM storage, the lengths may not be 
available. If MT is not currently reachable, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 
If storage does not offer format information, the format list should be empty parenthesis 

Defined values 

< index>: integer type values in the range of location numbers of phonebook memory 
<number>: string type phone number of format <type> 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) ; default 145 when 
dialUng string includes international access code character "+", otherwise 129 

<text>: string type field of maximum length <tlength>; character set as specified by command Select TE 
Character Set +CSCS 

<group>: string type field of maximum length <glength>; character set as specified by command Select TE 
Character Set +CSCS 

<adnumber>: string type phone number of format <adtype> 
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<adtype>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 

<secondtext>: string type field of maximum length <slength>; character set as specified by command Select 
TE Character Set +CSCS 

<eTnail>: string type field of maximum length <elength>; character set as specified by command Select TE 
Character Set +CSCS 

<sip_uri>: string type field of maximum length <siplength>; character set as specified by command Select 
TE Character Set +CSCS 

<tel_uri>: string type phone number of maximum length <tellength>; character set as specified by 
command Select TE Character Set +CSCS 

<nlength>: integer type value indicating the maximum length of field <number> 

<tlength>: integer type value indicating the maximum length of field <text> 

<glength>: integer type value indicating the maximum length of field <group> 

<slength>: integer type value indicating the maximum length of field < secondtext > 

<elength>: integer type value indicating the maximum length of field <email > 

<siplength>: integer type value indicating the maximum length of field <sip_uri> 

<tellength>: integer type value indicating the maximum length of field <tel_uri> 

<hidden> : integer type value indicates if the entry is hidden or not 

0: phonebook entry not hidden 

1 : phonebook entry hidden 

<written_index>: integer type value indicating the last location number <index> of the written phonebook 
entry 

Implementation 

Optional. 

8.15 Clock +CCLK 



Table 75: +CCLK parameter command syntax 



Command 


Possible response(s) 


+CCLK=<time> 


+CME ERROR: <err> 


+CCLK? 


+CCLK: <time> 

+CME ERROR: <err> 


+CCLK=? 





Description 

Set command sets the real-time clock of the MT. If setting fails in an MT error, +CME ERROR : <err> is returned. 
Refer subclause 9.2 for <err> values. 

Read command returns the current setting of the clock. 

Defined values 
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<time>: string type value; format is "yy/MM/dd,hh:mm:ss±zz", where characters indicate year (two last digits), 
month, day, hour, minutes, seconds and time zone (indicates the difference, expressed in quarters of an hour, 
between the local time and GMT; range -96.. .+96). E.g. 6th of May 1994, 22:10:00 GMT+2 hours equals to 
"94/05/06,22:10:00+08" 

NOTE: If MX does not support time zone information then the three last characters of <time> are not returned 
by +CCLK?. The format of <time> is specified by use of the +CSDF command. 

Implementation 

Optional. 



8.16 Alarm +CALA 



Table 76: +CALA parameter command syntax 



Command 


Possible response(s) 


+CALA=<time> [ , <n> [ , <type> [ , 
<text> [ , <recurr> [ , <silent>] 
] ] ] ] 


+CME ERROR: <err> 


+CALA? 


[+CALA: <time> , <nl> , <type> , [<text>] , [<recurr>] 
, <silent>] 

[<CR><LF>+CALA: <time> , <n2 > , <type> , [<text>] , [< 
recurr>] ,<silent> 
[...]] 

+CME ERROR: <err> 


+CALA=? 


+CALA: (list of supported <n>s) , (list of supported 
<type>s) , <tlength>, <rlength>, (list of supported 
<silent>s) 

+CME ERROR: <err> 



Description 

Set command sets an alarm time in the MT. There can be an array of different types of alarms, and each alarm may 
cause different text to be displayed in the MT display. If setting fails in an MT error, +CME ERROR : <err> is 
returned. Refer subclause 9.2 for <err> values. 

To set up a recurrent alarm for one or more days in the week, the <recurr>-parameter may be used. 

When an alarm is timed out and executed, the unsolicited result code +CALV : <n> is always returned, even if the 
alarm is set up to be silent. 

Read conmiand returns the list of current active alarm settings in the MT. 

Test command returns supported array index values, alarm types, and maximum length of the text to be displayed. 
Defined values 

<time>: refer +CCLK, +CSDF 

NOTE: If the <recurr>-parameter is used, the <tinie>-parameter must not contain a date. 

<n>, <nl>, <n2>: integer type value indicating the index of the alarm; default is manufacturer specific 

<type>: integer type value indicating the type of the alarm (e.g. sound, volume, LED); values and default are 
manufacturer specific 

<text >: string type value indicating the text to be displayed when alarm time is reached; maximum length 
<tlength> 
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<tlength>: integer type value indicating the maximum length of <text> 

<recurr>: string type value indicating day of week for the alarm in one of the following formats: 

"<1..7>[,<1..7> [...] ] " Sets a recurrent alarm for one or more days in the week. The digits 1 to 7 

corresponds to the days in the week, Monday (1), . . ., Sunday (7). 
Example: The string "1,2,3,4,5" may be used to set an alarm for all weekdays. 

"0" Sets a recurrent alarm for all days in the week. 

<rlength>: integer type value indicating the maximum length of <recurr> 

<silent >: Integer type value indicating if the alarm is silent or not. If set to 1 the alarm will be silent and the only 
result from the alarm is the unsohcited result code +CALV. If set to the alarm will not be silent. 

Implementation 

Optional. 

8. 1 7 Generic SIM access +CSI M 



Table 77: +CSIM action command syntax 



Command 


Possible response(s) 


+CSIM=<length> , <coniniand> 


+CSIM: <length>, <response> 

+CME ERROR: <err> 


+CSIM=? 





Description 

Set conmiand transmits to the MT the <coniniand> it then shall send as it is to the SIM. In the same manner, the SIM 
<response> shall be sent back by the MT to the TA as it is. Refer subclause 9.2 for <err> values. 

This command allows a direct control of the SIM that is installed in the currently selected card slot, by an distant 
apphcation on the TE. The TE shall then take care of processing SIM information within the frame specified by 
GSM/UMTS. 

NOTE: Compared to Restricted SIM Access command +CRSM, the definition of +CSIM allows TE to take more 
control over the SIM-MT interface. The locking and unlocking of the interface may be done by a special 
<command> value or automatically by TA/MT (by interpreting <command> parameter). In case that TE 
application does not use the unlock command (or does not send a < command > causing automatic 
unlock) in a certain timeout value, MT may release the locking. 

Defined values 

<length> : integer type; length of the characters that are sent to TE in <command> or <response> (two times 
the actual length of the command or response) 

<command> : command passed on by the MT to the SIM in the format as described in 3GPP TS 51.01 1 [28] 
(hexadecimal character format; refer +CSCS) 

<response> : response to the command passed on by the SIM to the MT in the format as described in 
3GPPTS 51.011 [28] (hexadecimal character format; refer +CSCS) 

Implementation 

Optional. 
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8.18 Restricted SIM access +CRSM 



Table 78: +CRSM action command syntax 



Command 


Possible response(s) 


+CRSM=<coniinand> [ , <f ileid> [ , <P 
1>, <P2>, <P3> [, <data> [, <pathid 
>] ] ] ] 


+CRSM: <swl>, <sw2> [, <response>] 
+CME ERROR: <err> 


+CRSM=? 





Description 

By using this command instead of Generic SIM Access +CSIM TE application has easier but more limited access to the 
SIM database. Set command transmits to the MT the SIM <coniniand> and its required parameters. If a SIM installed 
in the currently selected card slot, the MT handles internally all SIM-MT interface locking and file selection routines. 
As response to the command, MT sends the actual SIM information parameters and response data. MT error result code 
+CME ERROR may be returned when the command cannot be passed to the SIM, but failure in the execution of the 
conmiand in the SIM is reported in < swl > and < sw2 > parameters. Refer subclause 9.2 for <err> values. 

Coordination of command requests to SIM and the ones issued by GSM/UMTS application inside the MT is 
implementation dependent. However the TE should be aware of the precedence of the GSM/UMTS application 
commands to the TE commands. 

Defined values 

<command> (command passed on by the MT to the SIM; refer 3GPP TS 51.011 [28]): 



176 


READ BINARY 


178 


READ RECORD 


192 


GET RESPONSE 


214 


UPDATE BINARY 


220 


UPDATE RECORD 


242 


STATUS 


203 


RETRIEVE DATA 


219 


SET DATA 



all other values are reserved 

NOTE 1 : The MT internally executes all commands necessary for selecting the desired file, before performing the 
actual command. 

<fileid>: integer type; this is the identifier of a elementary datafUe on SIM. Mandatory for every command 

except STATUS 

NOTE 2: The range of valid file identifiers depends on the actual SIM and is defined in 3GPP TS 5 1 .01 1 [28]. 
Optional files may not be present at all. 

< PI >, < P2 >, < P3 >: integer type; parameters passed on by the MT to the SIM. These parameters are mandatory for 
every conomand, except GET RESPONSE and STATUS. The values are described in 3GPP TS 51.011 [28] 

<data>: information which shall be written to the SIM (hexadecimal character format; refer +CSCS) 

<pathid> : string type; contains the path of an elementary file on the SIM/UICC in hexadecimal format as defined 
in ETSI TS 102 221 [60] (e.g. "7F205F70" in SIM and UICC case). The <pathid> shall only be used in the 
mode "select by path fi-om MF" as defined in ETSI TS 102 221 [60]. 
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NOTE 3: Since valid elementary file identifiers may not be unique over all valid dedicated file identifiers the 
<pathid> indicates the targeted UICC/SIM directory path in case of ambiguous file identifiers. For 
earlier versions of this specification or if <pathid> is omitted, it could be implementation specific 
which one will be selected. 

< swl >, < s w2 >: integer type; information from the SIM about the execution of the actual command. These 
parameters are dehvered to the TE in both cases, on successful or failed execution of the command 

<response>: response of a successful completion of the command previously issued (hexadecimal character 
format; refer +CSCS). STATUS and GET RESPONSE return data, which gives information about the current 
elementary datafield. This information includes the type of file and its size (refer 3GPP TS 51.011 [28]). After 
READ BINARY, READ RECORD or RETRIEVE DATA command the requested data will be returned. 
<response> is not returned after a successful UPDATE BINARY, UPDATE RECORD or SET DATA 
connmand 

Implementation 

Optional. 

8.19 Secure control command +CSCC 



Table 79: +CSCC parameter command syntax 



Command 


Possible response(s) 


+CSCC=<mode> [ , <cmd_set> [ , 
<token>] ] 


+CSCC: <challenge> 
+CME ERROR: <err> 


+CSCC? 


+CSCC: <mode>, <cmd_setl> 
[<CR><LF>+CSCC : <mode>,<cmd set2> 
[...]] 

+CME ERROR: <err> 


+CSCC=? 


+CSCC : (list of supported <niode>s) , (Ust of supported 
<cmd_set>s) 



Description 

This command is used to enable/disable access to commands protected by security mechanism. This enables/disables 
access to command sets designated as "secure" such as programming of MT. Refer subclause 9.2 for possible <err > 
values. 

The TE asks for a <challenge> with <mode>=l and one specific command set (<cnid_set>), the MT replies with 
the <challenge>, which should be inserted into the identification algorithm in both entities (TE and MT). The 
algorithm output <token> is sent to the MT with <mode>=2 to enable the specified command set. <inode>=3 is used 
to disable the command set. 

The read command returns the status (<mode> 2 or 3) of each supported command set. 
Defined values 

<mode>: integer type 

1 request challenge token to enable access to specified command set 

2 enable access to specified connmand set (<token> required) 

3 disable access to specified command set 
<cmd_set>, <cmd_setl>, <cmd_set2>: 

MT/TA code re-programming connmand set. 
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other values below 128 are reserved by the present document 

<token>: string type; a variable length bit string represented with IRA characters 0-9 and A - F, each character 
representing a nibble; e.g. bit string "01 10 1 100 1001 1010" is represented by the IRA string "6C9A". The length 
of the required bit string varies depending on the value of <cmd_set> . 

<challenge>: same format as token 

Implementation 

Optional. 

8.20 Alert sound mode +CALM 



Table 80: +CALM parameter command syntax 



Command 


Possible response(s) 


+CALM=<mode> 


+CME ERROR: <err> 


+CALM? 


+CALM: <mode> 
+CME ERROR: <err> 


+CALM=? 


+CALM : (list of supported <inode >s ) 

+CME ERROR: <err> 



Description 

This command is used to select the general alert sound mode of the MT. Refer subclause 9.2 for possible <err> 
values. 

Test command returns supported values as compound value. 
Defined values 

<mode>: integer type 

normal mode 

1 silent mode (all sounds from MT are prevented) 
2... manufacturer specific 

Implementation 
Optional. 

8.21 Ringer sound level +CRSL 



Table 81 : +CRSL parameter command syntax 



Command 


Possible response(s) 


+CRSL=<level> 


+CME ERROR: <err> 


+CRSL? 


+CRSL: <level> 
+CME ERROR: <err> 


+CRSL=? 


+CRSL : (list of supported <level>s) 
+CME ERROR: <err> 
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Description 

This command is used to select the incoming call ringer sound level of the MT. Refer subclause 9.2 for possible 
<err> values. 

Test command returns supported values as compound value. 
Defined values 

< level >: integer type value with manufacturer specific range (smallest value represents the lowest sound level) 
Implementation 
Optional. 

8.22 Vibrator mode +CVIB 



Table 82: +CVIB parameter command syntax 



Command 


Possible response(s) 


+CVIB=<mode> 


+CME ERROR: <err> 


+CVIB? 


+CVIB: <mode> 

+CME ERROR: <err> 


+CVIB=? 


+CVIB : (list of supported <mode>s) 
+CME ERROR: <err> 



Description 

This command is used to enable and disable the vibrator alert feature of the MT. It is manufacturer specific how this 
interacts with +CALM command. Refer subclause 9.2 for possible <err> values. 

Test command returns supported values as compound value. 

Defined values 

<mode>: integer type 

disable 

1 enable 

... 1 5 reserved by the present document 

16... manufacturer specific 
Implementation 
Optional. 

8.23 Loudspeaker volume level +CLVL 



Table 83: +CLVL parameter command syntax 



Command 


Possible response(s) 


+CLVL=<level> 


+CME ERROR: <err> 
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vj-i r 


+^1jV1j ; <±eve±> 
+CME ERROR: <err> 


+CLVL=? 


+ CL VL : { list of supported < 1 eve 1 > s ) 
+CME ERROR: <err> 



Description 

This command is used to select the volume of the internal loudspeaker of the MT. Refer subclause 9.2 for possible 
<err> values. 

Test command returns supported values as compound value. 
Defined values 

< level >: integer type value with manufacturer specific range (smallest value represents the lowest sound level) 
Implementation 
Optional. 

8.24 Mute control +CMUT 



Table 84: +CMUT parameter command syntax 



Command 


Possible response(s) 


+CMUT=<n> 


+CME ERROR: <err> 


+CMUT? 


+CMUT: <n> 

+CME ERROR: <err> 


+CMUT=? 


+CMUT : (list of supported <n>s) 



Description 

This command is used to enable and disable the uplink voice muting during a voice call. Refer subclause 9.2 for 
possible <err> values. 

Test command returns supported values as compound value. 
Defined values 
<n>: integer type 

mute off 

1 mute on 
Implementation 
Optional. 

8.25 Accumulated call meter +CACM 



Table 85: +CACM parameter command syntax 



Command 


Possible response(s) 


+CACM= [<passwd>] 


+CME ERROR: <err> 
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+CACM? 


+CACM: <acni> 
+CME ERROR: <err> 


+CACM=? 





Description 

Set command resets the Advice of Charge related accumulated call meter value in SIM card or in the active application 
in the UICC (GSM or USIM) file EFacm- ACM contains the total number of home units for both the current and 
preceding calls. SIM PIN2 is usually required to reset the value. If setting fails in an MT error, 
+CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Read command returns the current value of ACM. 

Defined values 

<passwd>: string type; SIM PIN2 

<acm>: string type; accumulated call meter value similarly coded as <ccm> under +CAOC 
Implementation 
Optional. 

8.26 Accumulated call meter maximum +CAMM 



Table 86: +CAMM parameter command syntax 



Command 


Possible response(s) 


+CAMM= [<acmmax> [, <passwd>] ] 


+CME ERROR: <err> 


+CAMM? 


+ C AMM : < a cmmax > 
+CME ERROR: <err> 


+CAMM=? 





Description 

Set command sets the Advice of Charge related accumulated call meter maximum value in SIM card or in the active 
application in the UICC (GSM or USIM) file EpACMmax- ACMmax contains the maximum number of home units 
allowed to be consumed by the subscriber. When ACM (refer +CACM) reaches ACMmax calls are prohibited (see also 
3GPP TS 22.024 [261). SIM PIN2 is usually required to set the value. If setting fails in an MT error, 
+CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Read command returns the current value of ACMmax. 

Defined values 

<acmmax>: string type; accumulated call meter mjiximum value similarly coded as <ccm> under +CAOC; value 
zero disables ACMmax feature 

<passwd>: string type; SIM PIN2 

Implementation 

Optional. 
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8.27 Price per unit and currency table +CPUC 



Table 87: +CPUC parameter command syntax 



Command 


Possible response(s) 


+CPUC=<currency>, <ppu> [, <passwd>] 


+CME ERROR: <err> 


+CPUC? 


+CPUC : <currency> , <ppu> 
+CME ERROR: <err> 


+CPUC=? 





Description 

Set command sets the parameters of Advice of Charge related price per unit and currency table in SIM card or in the 
active application in the UICC (GSM or USIM) file EFpucx- PUCT information can be used to convert the home units 
(as used in +CAOC, +CACM and +CAMM) into currency units. SIM P1N2 is usually required to set the parameters. If 
setting fails in an MT error, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Read command returns the current parameters of PUCT. 

Defined values 

<currency>: string type; three-character currency code (e.g. "GBP", "DEM"); character set as specified by 
command Select TE Character Set +CSCS 

<ppu>: string type; price per unit; dot is used as a decimal separator (e.g. "2.66") 

<passwd>: string type; SIM PIN2 
Implementation 
Optional. 

8.28 Call Meter maximum event +CCWE 



Table 88: +CCWE parameter command syntax 



Command 


Possible response(s) 


+CCWE=<inode> 


+CME ERROR: <err> 


+CCWE? 


+CCWE: <mode> 

+CME ERROR: <err> 


+CCWE=? 


+CCWE : (list of supported <inode>s) 
+CME ERROR: <err> 



Description 

Shortly before the ACM (Accumulated Call Meter) maximum value is reached, an unsolicited result code +CCWV will 
be sent, if enabled by this command. The warning is issued approximately when 30 seconds call time remains. It is also 
issued when starting a call if less than 30 s call time remains. If setting fails in an MT error, +CME ERROR : <err > 
is returned. Refer subclause 9.2 for <err> values. 

Read command returns the current setting. 

Test connmand returns supported settings. 

Defined values 
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<mode>: integer type 

Disable the call meter warning event 

1 Enable the call meter warning event 
Implementation 

Optional. 

8.29 Power class +CPWC 



Table 89: +CPWC parameter command syntax 



Command 


Possible response(s) 


+CPWC= [<class> [ , <band>] ] 


+CME ERROR: <err> 


+CPWC? 


+CPWC: <curr_classl>, <def_classl> , 
<bandl> [ , <curr class2>,<def class2 
>, <band2> [...]] 

+CME ERROR: <err> 


+CPWC=? 


+CPWC: list of supported (<band>, (Ustof 
<class>s) ) pairs 

+CME ERROR: <err> 



Description 

This command is used to set the preferred MT power class for each GSM frequency band supported. The interaction of 
this setting with the selected bearer service (+CBST and HSCSD commands) is manufacturer specific (for example, 
selecting a multislot operation might reduce the power class automatically). If setting fails in an MT error, 
+CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Read command returns the currently selected output power class and default output power class for each supported 
frequency band (as defined by MT manufacturer). Parameter <bandl > and its associated power class parameters refer 
to the currently used frequency band. For example, +CPWC : 2,l,l,5,4,0in case of a dual-band MT currently 
using band GSM 1800, for which the power class is currently set to 2, the default being class 1, and for which the 
currently set power class value for GSM900 is class 5 the default being class 4. 

Test command returns supported bands and their power classes. For example, 

+CPWC: (0, (0,4,5)), (1, (0-2)) in case of a dual-band handheld MT. 

Defined values 

<class>, <curr_classn>s, <def_classn>s: integer type 

default (not apphcable to <curr_class>s or <def_classn>s) 

1 . . . MT output power class as in 3GPP TS 45.005 [38] 
<band>, <bandn>s: 

GSM900 

1 GSM1800 

2 reserved for GSM 1900 

3 GSM 400 
Implementation 
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Optional. 

8.30 Set Language +CLAN 



Table 90: +CLAN parameter command syntax 



Command 


Possible response(s) 


+CLAN=<code> 


+CME ERROR: <err> 


+CLAN? 


+CLAN: <code> 
+CME ERROR: <err> 


+CLAN=? 


+CLAN : (list of supported < code >s ) 
+CME ERROR: <err> 



Description 

This command sets the language in the MT. The set-command must confim the selected language with the MMI- 
module in the MT. If setting fails, a MT error, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> 
values. 

The <code>-parameter is a two-letter abbreviation of the language. The language codes, as defined in ISO 639, consists 
of two characters, e.g. "sv", "en" etc. 

The complete set of language codes to be used are manufacturer specific and should all be possible to use with the 
command. Some examples are described under <code>. For a complete Ust see ISO 639. 

The read command gives the current language as output. If the language has been set to "AUTO", the read command 
returns the current language set from the currently selected SIM-card /UICC. Hence, the "AUTO"-code is never 
returned by the read-command. 

Test command returns supported <code>s. 

Defined values 

<code>: (not all language codes are present in this Ust) 



"AUTO" Read language from SIM-card /UICC. "Auto" is not returned by the read-conomand. 

"sw" Swedish 

"fi" Finnish 

"da" Danish 

"no" Norwegian 

"de" German 

"fr" French 

"es" Spanish 

"it" ItaUan 

"en" English 



Imple mentation 

Optional. 
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8.31 Language Event +CLAE 



Table 91 : +CLAE parameter command syntax 



Command 


Possible response(s) 


+CLAE=<inode> 


+CME ERROR: <err> 


+CLAE? 


+CLAE: <mode> 

+CME ERROR: <err> 


+CLAE=? 


+CLAE : {list of supported <niode>s) 
+CME ERROR: <err> 



Description 

This command is used to enable/disable unsolicited result code +CLAV: <code>. If <mode>=l, +CLAV: <code> 
is sent from the MT when the language in the MT is changed. If setting fails, a MT error, +CME ERROR: <err> is 
returned. Refer subclause 9.2 for <err> values. 

Read command returns the current status for <mode>. 

Test command returns supported <mode>s. 

Defined values 

<mode>: integer type 

Disable unsoUcited result code +CLAE 

1 Enable unsolicited result code +CLAE 
<code>: For description see +CLAN. 

Implementation 
Optional. 

8.32 Set Greeting Text +CSGT 



Table 92: +CSGT parameter command syntax 



Command 


Possible response(s) 


+CSGT=<mode> [ , <text>] 


+CME ERROR: <err> 


+CSGT? 


+CSGT: <text> , <niode> 

+CME ERROR: <err> 


+CSGT=? 


+CSGT: (hst of supported <mode>s) ,<ltext> 
+CME ERROR: <err> 



Description 

This command sets and activates the greeting text in the MT. The greeting text is shown in the MT display when the 
MT is turned on. The command can also be used to deactivate a text. If setting fails in an MT error, 
+CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

The read command queries the current <text> and the status of the <mode> parameter 

Test command returns supported <mode>s and the maximum number of characters in <text>. For example. 
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+CSGT: (0-1), 20 
Defined values 

<text >: string type; A free text that shall be displayed. The text can not include <CR> 
<mode>: integer type 

Turn off greeting text 

1 Turn on greeting text 
Implementation 

Optional. 

8.33 Set Voice Mail Number +CSVI\/I 



Table 93: +CSVM parameter command syntax 



Command 


Possible response(s) 


+CSVM=<mode> [ , <nuinber> [ , < 
type>] ] 


+CME ERROR: <err> 


+CSVM? 


+CSVM: <niode> , <nuTnber> , <type> 
+CME ERROR: <err> 


+CSVM=? 


+CSVM : (list of supported <mode>s) , (list of 
supported <type>s) 

+CME ERROR: <err> 



Description 

The number to the voice mail server is set with this command. The parameters <number > and <type> can be left out 
if the parameter <mode> is set to 0. If setting fails, an MT error, +CME ERROR : <err> is returned. Refer 
subclause 9.2 for <err> values. 

Read command returns the currently selected voice mail number and the status (i.e. enabled/disabled). 
Test conmiand returns supported <mode>s and <type>s. 
Defined values 

<mode>: integer type 

Disable the voice mail number. 

1 Enable the voice mail number. 
<number>: string type; Character string <0..9,+> 

<type>: integer type; Type of address octet, (refer 3GPP TS 24.008 [8] subclause 10.5.4.7) 

129 ISDN / telephony numbering plan, national / international unknown 

145 ISDN / telephony numbering plan, international number 

161 ISDN / telephony numbering plan, national number 

128 - 255 Other values refer 3GPP TS 24.008 [8] subclause 10.5.4.7 

<type>: type of address octet in integer format (refer 3GPP TS 24.008 [8] subclause 10.5.4.7); default 145 when 
dialling string includes international access code character "+", otherwise 129 
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Implementation 

Optional. 

8.34 Ring Melody Control +CRMC 



Table 94: +CRMC parameter command syntax 



Command 


Possible response(s) 


+CRMC=<index> , <volume> [ , [ 
<call type>] [ , <prof ile>] ] 


+CME ERROR: <err> 


+CRMC? 


+CRMC: <ind.ex> , <volume> [ , [<call 
typel>] [ , <prof ilel>] ] 

[<CR><LF>+CRMC : <index> , <volume> [ , [<c 
all type2>] [ , <prof ilel >] ] [...]] 
[<CR><LF> + CRMC : < index> , <volunie> [ , [<c 
all typel>] [ , <prof ile2>] ] ] 
[<CR><LF>+CRMC : <index> , <volume> [ , [<c 
all type2>] [ , <prof ile2>] ] [...]] 

+CME ERROR: <err> 


+CRMC=? 


+CRMC : (list of supported <index>s) , (list of 

supported <volume>s) [, [ (list of supported <call 
type>s) ] [, (list of supported <profile>s) ] ] 

+CME ERROR: <err> 



Description 

Write command causes the MT to set a specific ring melody and volume for the selected call type and profile. The 
default values for the optional parameters are defined by the manufacturer. 

Read command queries the settings for the ring melody. If call types and profiles are available the corresponding ring 
melodies are listed. Starting with call typel and profUel the ring melody settings for each available profile and call type 
is issued. 

Test command returns the list of available ring melodies, volumes, call types and profiles. 
Refer subclause 9.2 for <err> values. 
Defined values 

<index>: integer type; manufacturer specific number to identify a certain ring melody 

<volume>: integer type value with manufacturer specific range (smallest value represents the lowest sound level) 

<call typex>: integer type; manufacturer specific number for a call type 

<prof ilex>: integer type; manufacturer specific number for a profile 
Implementation 
Optional. 
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8.35 Ring Melody Playback +CRMP 



Table 95: +CRMP action command syntax 



Command 


Possible response(s) 


+CRMP=<call 

type> [ , <voluine> [ , <type> , < 
index>] ] 


+CME ERROR: <err> 


+CRMP=? 


+CRMP : (list of supported <call 

type>s) , (list of supported 

<volume>s) , {<typeO>) , (list of supported 

<index>s) 

[<CR><LF>+CRMP : (list of supported <call 

type>s) , (list of supported 

<volume>s) , (<typel>) , ( list of supported 

<index>s) ] 

+CME ERROR: <err> 



Description 

Execution command causes the MT to playback a specific ring type. The default values for the optional parameters are 
the current selected in the MT. 

Test command returns the available ring melodies. 

Refer subclause 9.2 for <err> values. 

Defined values 

<call type>: integer type ; manufacturer specific 

<volume>: integer type value with manufacturer specific range (smallest value represents the lowest sound level) 
<type>: integer type 

Manufacturer defined 

1 User defined 
<index>: integer type 

Implementation 
Optional. 

8.36 Master Reset +CMAR 



Table 96: +CMAR action command syntax 



Command 


Possible response(s) 


+CMAR=<phone lock code> 


+CME ERROR: <err> 


+CMAR=? 


+CME ERROR: <err> 



Description 

This command requests the MT to reset user data. The user data in the phone will be reset to default values. If setting 
fails, a MT error, +CME ERROR : <err>, is returned. Refer subclause 9.2 for <err> values. 

If the MT is locked and this command is used, then the MT will be unlocked after the master reset. 
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Test command returns OK. 
Defined values 

<phone lock code> string type; Security code (Phone Lock code) must be verified before performing the 
master reset. 

Implementation 

Optional. 

8.37 List all available AT commands +CLAC 



Table 97: +CLAC action command syntax 



Command 


Possible response(s) 


+CLAC 


<AT Coniniandl> 
[<CR><LF><AT Coinniand2> 
[...]] 

+CME ERROR: <err> 


+CLAC=? 


+CME ERROR: <err> 



Description 

Execution command causes the MT to return one or more hnes of AT Conunands. Refer subclause 9.2 for <err> 
values. 

NOTE: This command only returns the AT commands that are available for the user. 
Defined values 

<AT Command>: 

Defines the AT command including the prefix AT. Text shall not contain the sequence 0<CR> or OK<CR> 

Implementation 

Optional. 

8.38 Delete alarm +CALD 



Table 98: +CALD action command syntax 



Command 


Possible response(s) 


+CALD=<n> 


+CME ERROR: <err> 


+CALD=? 


+CALD : (hst of supported <n>s) 
+CME ERROR: <err> 



Description 

Action command deletes an alarm in the MT. If the command fails in an MT error, +CME ERROR : <err> is 
returned. Refer subclause 9.2 for <err> values. 

Test command returns supported array index values. 

Defined values 

<n>: integer type value indicating the index of the alarm; default is manufacturer specific 
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Implementation 

Optional. 

8.39 Postpone or dismiss an alarm +CAPD 



Table 99: +CAPD action command syntax 



Command 


Possible response(s) 


+CAPD= [<sec>] 


+CME ERROR: <err> 


+CAPD=? 


+ CAPD : { list of supported < s e c> s ) 
+CME ERROR: <err> 



Description 

Set command postpones or dismisses a currently active alarm. If the command fails in an MT error, 
+CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Test command returns supported <sec>-parameter values. 

Defined values 

<sec>: integer type value indicating the number of seconds to postpone the alarm. If <sec> is set to (default), 
the alarm is dismissed. 

Implementation 

Optional. 

8.40 Automatic Time Zone Update +CTZU 



Table 100: +CTZU parameter command syntax 



Command 


Possible response(s) 


+CTZU=<onof f > 


+CME ERROR: <err> 


+CTZU? 


+CTZU: <onoff> 
+CME ERROR: <err> 


+CTZU=? 


+CTZU: {list of supported <onof f >s) 
+CME ERROR: <err> 



Description 

Set command enables and disables automatic time zone update via NITZ. If setting fails in an MT error, 
+ CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Read command returns the current settings in the MT. 

Test command returns supported on- and off-values. 

Defined values 

<onof f >: integer type value indicating 

Disable automatic time zone update via NITZ. 

1 Enable automatic time zone update via NITZ. 
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Optional. 

8.41 Time Zone Reporting +CTZR 



Table 101 : +CTZR parameter command syntax 



Command 


Possible response(s) 


+CTZR=<onof f > 


+CME ERROR: <err> 


+CTZR? 


+CTZR: <onof f > 

+CME ERROR: <err> 


+CTZR=? 


+CTZR : {list of supported <onof f >s) 
+CME ERROR: <err> 



Description 

This set command enables and disables the time zone change event reporting. If the reporting is enabled the MT returns 
the unsolicited result code +CTZV : <tz > whenever the time zone is changed. If setting fails in an MT error, 
+CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

Read command returns the current reporting settings in the MT. 

Test command returns supported <onof f >-values. 

NOTE: The Time Zone reporting is not affected by the Automatic Time Zone setting command, +CTZU. 
Defined values 

<onof f >: integer type value indicating: 

disable time zone change event reporting. 

1 Enable time zone change event reporting. 
Implementation 

Optional. 

8.42 Enter protocol mode+CPROT 



Table 102: +CPROT action command syntax 



Command 


Possible response(s) 


+CPROT=<proto> [ , <version> [ 
, <lsapl> [ , . . . [<lsapN>] ] ] ] 


CONNECT 
NO CARRIER 
OK 

ERROR 

+CME ERROR: <err> 
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+CPROT=? 



+CPROT : <protol> [ , (list of supported 

<version>s) [, (list of supported <lsapl>s) [,...[, (list 

of supported <lsapN>s) ] ] ] ] 

[<CR><LF> + CPROT : <proto2>[, (list of supported 
<version>s) [, (list of supported 

<lsapl>s) [,...[, (list of supported <lsapN>s) ] ] ] ] 
[...]] 



Description 

Set command informs TA that TE wants to establish a peer-to-peer protocol <proto> or upper layer connection 
(indicating by the < 1 sap > s setting) with the MT on the link from which the command was received. This command 
can be used in case the link between TE and MT does not provide itself such a mechanism. 

If MT has succeeded in establishing a logical hnk between application protocols and external interface, it will send 
CONNECT message to the TE. Otherwise, the NO CARRIER response will be returned. 

If the CONNECT response is received, TE can start sending <proto> or upper layer frames. 

The connection shall always return for <proto> mode when the protocol session is ended. When the MT receives a 
disconnect request from its peer entity, it will process it and send OK response to the TE indicating its capabihty for 
receiving new AT commands. Since <proto> or upper layers can be accessed in other ways, TA must have pre- 
knowledge of the fact that connection is initiated with AT+CPROT command. This means that switch to <proto> 
mode must include some sort of notification to the protocol entity. 

This command can be aborted by sending a <proto> or upper layer disconnection frame. In that case, MT will return 
in command mode by sending the OK response. 

Refer subclause 9.2 for possible <err> values. 

Test command returns values supported as a compound value. 

Defined values 



<proto>: integer type 

OBEX (refer IrDA Object Exchange Protocol [44]). 
... 1 5 reserved by the present document 

16... manufacturer specific 

<version>: version number of <proto>: string type 

<lsapl >: integer type; defines a level of service or application protocol on the top of <proto> layer. It may refer 
to services or protocols defined in other standards development organizations (SDOs). 

1 IrMC level 1 (Minimum Level) Only .(refer [43] subclause 2.9.4) 

2 IrMC level 1 and 2 (Minimum and Access Levels) Only, .(refer [43] subclause 2.9.4) 

4 IrMC level 1, 2 and 3 (Minimum, Access, Index Levels) Only- impUes static index support, 

.(refer [43] subclause 2.9.4) 

8 IrMC level 1, 2 and 4 (Minimum, Access and Sync Levels) Only-implies unique index support, 

.(refer [43] subclause 2.9.4) 

10 IrMC level 1, 2, 3 and 4 (Minimum, Access, Index and Sync Levels)-implies support of static and 

unique index, .(refer [43] subclause 2.9.4) 

... 1 5 reserved by the present document 

16... manufacturer specific 
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<lsap2> . . . <lsapN>: integer type 

In case <lsapN> , <lsapN+l> received in the +CPROT command identifies protocol layers, the protocol 
identified by N+1 shall be on the top of the protocol identified by N on a framework point of view. 

... 1 5 reserved by the present document 

16... manufacturer specific 
Implementation 
Optional. 

8.43 Generic UlCC Logical Channel access +CGLA 



Table 103: +CGLA action command syntax 



Command 


Possible response(s) 


+CGLA=<sessionid> , <length> 
, <command> 


+CGLA: <length>, <response> 
+CME ERROR: <err> 


+CGLA=? 





Description 

Set command transmits to the MT the < command > it then shall send as it is to the selected UICC. In the same manner 
the UICC <response> shall be sent back by the MT to the TA as it is. Refer subclause 9.2 for <err> values. 

This command allows a direct control of the currently selected UICC by a distant application on the TE. The TE shall 
then take care of processing UICC information within the frame specified by GSM/UMTS. 

Although Generic UICC Logical Channel Access command +CGLA allows TE to take control over the UICC-MT 
interface, there are some functions of the UICC-MT interface that logically do not need to be accessed from outside the 
TA/MT. Moreover, for security reason the GSM network authentication should not be handled outside the TA/MT. 
Therefore it shall not be allowed to execute a Run GSM Algorithm connmand or an Authenticate connmand in GSM 
context from the TE using +CGLA at all time whether the +CGLA is locked or unlocked. This shall not forbid the TE to 
send Authenticate commands in other security contexts (e.g. EAP security context). 

For example, the TA/MT shall forbid the transfer of the Authenticate command to a USIM application when parameters 
P2 = (GSM security context). See 3GPP TS 31.102 [59] for USIM authenticate connmand definition. 

NOTE: Compared to Restricted UICC Access command +CRLA, the definition of +CGLA allows TE to take more 
control over the UICC-MT interface. The locking and unlocking of the interface may be done by a special 
< command > value or automatically by TA/MT (by interpreting < command > parameter). In case that TE 
application does not use the unlock command (or does not send a <command> causing automatic 
unlock) in a certain timeout value, MT may release the locking. 

Defined values 

<sessionid> : integer type; this is the identifier of the session to be used in order to send the APDU conmiands 
to the UICC. It is manadatory in order to send commands to the UICC when targeting applications on the smjirt 
card using a logical channel other than the default channel (channel "0"). 

< length> : integer type; length of the characters that are sent to TE in <command> or <response> (two times 
the actual length of the command or response) 

<command> : command passed on by the MT to the UICC in the format as described in 3GPP TS 31.101 [65] 
(hexadecimal character format; refer +CSCS) 

< response > : response to the command passed on by the UICC to the MT in the format as described in 
3GPPTS 31.101 [65] (hexadecimal character format; refer +CSCS) 
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Implementation 

Optional. 

8.44 Restricted UlCC Logical Channel access +CRLA 



Table 104: +CRLA action command syntax 



Command 


Possible response(s) 


+CRLA=<sessionid> , <command> [ , <f i 
leid> [, <P1>, <P2>, <P3> [, <data> [, < 
pathid>] ] ] ] 


+CRLA: <swl> , <sw2> [ , <response>] 
+CME ERROR: <err> 


+CRLA=? 





Description 

By using this command instead of Generic UICC Access +CGLA TE application has easier but more limited access to 
the UICC database. Set command transmits to the MT the UICC <command> and its required parameters. MT handles 
internally, for the selected UICC, all UICC-MT interface locking and file selection routines. As response to the 
command, MT sends the actual UICC information parameters and response data. MT error result code +CME ERROR 
may be returned when the command cannot be passed to the UICC, but failure in the execution of the command in the 
UICC is reported in <swl> and <sw2 > parameters. Refer subclause 9.2 for <err> values. 

Coordination of command requests to UICC and the ones issued by GSM/UMTS application inside the MT is 
implementation dependent. However the TE should be aware of the precedence of the GSM/UMTS application 
commands to the TE commands. 

Defined values 

<sessionid>: integer type; this is the identifier of the session to be used in order to send the APDU commands 
to the UICC. It is mandatory in order to send commands to the UICC when targeting applications on the smart 
card using a logical channel other than the default channel (channel "0"). 

<command> (conmiand passed on by the MT to the UICC; refer 3GPP TS 31.101 [65]): 



176 


READ BINARY 


178 


READ RECORD 


192 


GET RESPONSE 


214 


UPDATE BINARY 


220 


UPDATE RECORD 


242 


STATUS 


203 


RETRIEVE DATA 


219 


SET DATA 



all other values are reserved 

NOTE 1: The MT internally executes all commands necessary for selecting the desired file, before performing the 
actual command. <fileid>: integer type; this is the identifier of a elementary datafile on UICC. 
Mandatory for every command except STATUS. 

NOTE 2: The range of valid file identifiers depends on the actual UICC and is defined in 3GPP TS 31.101 [65]. 

Optional files may not be present at all.<Pl>, <P2 >, <P3 >: integer type; parameters passed on by the 
MT to the UICC. These parameters are mandatory for every command, except GET RESPONSE and 
STATUS. The values are described in 3GPP TS 31.101 [65]. 

<data>: information which shall be written to the SIM (hexadecimal character format; refer +CSCS) 



ETSI 



3GPP TS 27.007 version 10.5.0 Release 10 



125 



ETSI TS 127 007 VI 0.5.0 (2011-10) 



<pathid>: string type; contains the path of an elementary file on the UICC in hexadecimal format (e.g. 

"5F704F30" for DFsolsa/EFsai). The <pathid> shall only be used in the mode "select by path from ciurent 
DF" as defined in ETSI TS 102 221 [60]. 

< swl >, < sw2 >: integer type; information from the UICC about the execution of the actual command. These 
parameters are delivered to the TE in both cases, on successful or failed execution of the command 

<response>: response of a successful completion of the command previously issued (hexadecimal character 
format; refer +CSCS). STATUS and GET RESPONSE return data, which gives information about the current 
elementary datafield. This information includes the type of file and its size (refer 3GPP TS 31.101 [65]). After 
READ BINARY, READ RECORD or RETRIEVE DATA command the requested data will be returned. 
<response> is not returned after a successful UPDATE BINARY, UPDATE RECORD or SET DATA 
command 

Implementation 

Optional. 

8.45 Open Logical Channel +CCHO 



Table 105: +CCHO action command syntax 



Command 


Possible response(s) 


+CCHO=<dfname> 


<sessionid> 

+CME ERROR: <err> 


+CCHO=? 





Description 

Execution of the command causes the MT to return <sessionid> to allow the TE to identify a channel that is being 
allocated by the currently selected UICC, which is attached to ME. The currently selected UICC will open a new logical 
channel; select the application identified by the <df name> received with this command and return a session Id as the 
response. The ME shall restrict the conmiunication between the TE and the UICC to this logical channel. 

This <sessionid> is to be used when sending commands with Restricted UICC Logical Channel access +CRLA or 
Generic UICC Logical Channel access +CGLA conamands. 

NOTE: The logical channel number is contained in the CLASS byte of an APDU command, thus implicitly 
contained in all APDU commands sent to a UICC. In this case it will be up to the MT to manage the 
logical channel part of the APDU CLASS byte and to ensure that the chosen logical channel is relevant to 
the <sessionid> indicated in the AT command. See 3GPP TS 31.101 [65] for further information on 
logical channels in APDU commands protocol. 

Refer subclause 9.2 for possible <err> values. 

Defined values 

<df name> : all selectable applications in the UICC are referenced by a DF name coded on 1 to 16 bytes 

<sessionid>: integer type; a session Id to be used in order to target a specific application on the smart card (e.g. 
(U)SIM, WIM, ISIM) using logical channels mechanism 

See 3GPP TS 31.101 [65] for more information about defined values. 

Implementation 

Optional. 
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8.46 Close Logical Channel +CCHC 



Table 106: +CCHC action command syntax 



Command 


Possible response(s) 


+CCHC=<sessionid> 


+CCHC 

+CME ERROR: <err> 


+CCHC=? 





Description 

This command asks the ME to close a communication session with the active UICC. The ME shall close the previously 
opened logical channel. The TE will no longer be able to send commands on this logical channel. The UICC will close 
the logical channel when receiving this command. Refer subclause 9.2 for possible <err> values. 

Defined values 

<sessionid>: integer type; a session Id to be used in order to target a specific application on the smart card (e.g. 
(U)SIM, WIM, ISIM) using logical channels mechanism 

Implementation 

Optional. 

8.47 EAP authentication +CEAP 



Table 107: +CEAP action command syntax 



Command 


Possible response(s) 


+CEAP=<dfname>, <EAPMet 
hod>,<EAP packet data> 
[, <DFeap>] 


+CEAP: <EAPsessionid>, 
<EAP packet response> 

+CME ERROR: <err> 


+CEAP=? 





Description 

This command allows a TE to exchange EAP packets with the UICC or the ME. 

Prior to the execution of this command, the TE shall retrieve the available AIDs using the +CUAD command. The TE 
shall select one appropriate AID to be addressed. Selection may include asking the user, and considering EAP methods 
supported by the AIDs. The TE shall set the <df name> value using the selected AID and shall set the 
<EAPMethod> value to the requested EAP method. The TE may set the <DFeap> value to the directory file 
identifier that is applicable to the <EAPMethod>; which is derived from the discretionary data returned by +CUAD. 
The parameter is mandatory for EAP terminated in UICC. 

If the targeted apphcation on the UICC does support the requested EAP method, the MT shall use the value provided in 
<DFeap> , and it shall transmit the <EAP packet data> to the UICC application using the Authenticate APDU 
command as defined in ETSI TS 102 310 [66]. The appropriate DFeap in the ADF must be selected prior to the 
submission of an EAP Authenticate command with the <EAP packet data>. Then the EAP Response data sent by 
the UICC apphcation in its response to the Authenticate conamand shall be provided to the TE in <EAP packet 
response>. 

If the targeted application on the UICC does not support the requested EAP method and if the MT does support this 
method then the <EAP packet data> shaU be handled by the MT. During the handhng of the EAP method, the MT 
shall run the authentication algorithm on the SIM or USIM, respectively. 
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Also the MT has to allocate an <EAPsessionid> in order to identify an EAP session and its corresponding keys and 
parameters. 

If neither the MT nor the appropriate UICC application support the requested EAP method, the MT shall respond with 
CME ERROR: 4 9 (EAP method not supported). 

Refer subclause 9.2 for possible <err> values. 

Defined values 

<df name>: string type in hexadecimal character format. All selectable applications are represented in the UICC by 

an AID coded on 1 to 16 bytes. 

<EAPMethod>: string type in hexadecimal character format. This is the EAP Method Type as defined in 

RFC 3748 [68] in 1 byte format or 8 bytes expanded format. The v alue range for 1 byte format and for 8 bytes 
expanded format is defined in RFC 3748 [68]. 

<EAP packet data>: string type in hexadecimal character format. This is the EAP packet data in hexadecimal 
character as defined in ETSI TS 102 310 [66]. 

<DFeap>: string type in hexadecimal character format. Contains the DF(EAP) associated with the specified 
<EAPMethod> on the SIM/UICC as defined in ETSI TS 102 310 [66] (e.g. "6D34"). 

<EAPsessionid>: integer type. This is the identifier of the EAP session to be used in order to retrieve the EAP 
parameters with EAP Retreive Parameters +CERP command. Value range is from 1 to 4294967295. 

<EAP packet response>: string type in hexadecimal character format. Defined in ETSI TS 102 310 [66]. 

Implementation 

Optional. 
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8.48 EAP Retrieve Parameters +CERP 



Table 108: +CERP action command syntax 



Command 


Possible response(s) 


+CERP=<EAPsessionid> , 
<EAPparameter> 


+CERP: <EAP parameter 
respon.se> 

+CME ERROR: <err> 


+CERP=? 





Description 

This command allows a TE to retrieve EAP session parameters / derived keys after a run of the +CEAP command. If the 
EAP session is handled by the UICC then the MT shall return the content of the elementary file corresponding to the 
indicated <EAPparameter>. Those EEs are defined in ETSI TS 102 310 [66]. 

If the MT handles the EAP session then the MT shall return the corresponding parameter encoded as defined for EAP 
files, see ETSI TS 102 310 [66]. 

For example, the keys shall be retrieved in the TLV format described in ETSI TS 102 310 [66]. 

If neither the MT nor the appropriate UICC application can provide the requested information (e.g. because the 
requested EAP session ID does not exist), the MT shall respond with CME ERROR : 5 (Incorrect parameters). 

Refer subclause 9.2 for possible <err> values. 

Defined values 

<EAPparameter>: integer type. 

1 Keys 

2 Status 

3 Identity 

4 Pseudonym 

<EAPsessionid>: integer type; this is the identifier of the EAP session to be used in order to retrieve the EAP 
parameters corresponding to an active EAP session. Value range is from 1 to 4294967295. 

<EAP parameter response >: string type in hexadecimal character format. The format of the parameter is 
defined in ETSI TS 102 310 [66]. The <EAP parameter response> depends on the value of the 
<EAPparameter>. 

Implementation 

Optional. 

8.49 UICC Application Discovery +CUAD 



Table 109: +CUAD action command syntax 



Command 


Possible response(s) 


+CUAD [=<option>] 


+CUAD : <response> [ , <active_application> [ , <AID>] ] 
+CME ERROR: <err> 


+CUAD=? 


[ + CUAD : ( list of supported <option>s) ] 
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Description 

This command asks the MT to discover what applications are available for selection on the UICC. According to 
ETSI TS 102 221 [60], the ME shall access and read the EFdir file in the UICC and return the values that are stored in 
its records. Each record contains the AID and optionally application parameters of one of the applications available on 
the UICC. 

If optional parameter(s) are requested and the EFdir file is not present in the UICC, <response> shall be empty. 
Refer subclause 9.2 for possible <err> values. 
Defined values 

< response >: string type in hexadecimal character format. The response is the content of the EFdir. 
<option>: integer type. 

0: no parameters requested in addition to <response>. 

1 include <active_application>. 
<active_application>: integer type. 

no SIM or USIM active. 

1 active apphcation is SIM. 

2 active application is USIM, followed by <AID>. 

<AID>: string type in hexadecimal character format. AID of active USIM. 
Implementation 
Optional. 

8.50 Mobile Originated Location Request +CI\/IOLR 



Table 8.50-1 : +CMOLR parameter command syntax 



Command 


Possible response(s) 


+CMOLR=<enable> [ , <method> [ , <hor-acc- 
set> [ , <hor-acc> [ , <ver-req> [ , <ver-acc- 
set> [, <ver-acc> [, <vel-req> [, <rep- 
mode> [ , <timeout> [ , < interval > [ , < shape - 
rep> [ , <plane> [ , <NMEA-rep> [ , <third- 
party-address>] ]]]]]]]]]]]]]] 


+CME ERROR: <err> 


+CMOLR? 


+CMOLR: <enable>, <niethod>, <hor-acc- 

set>, [<hor-acc>] ,<ver-req>, [<ver-acc- 
set>] , [<ver-acc>] , <vel-req>, <rep- 
inode>, <timeout>, [<interval>] ,<shape- 
rep>, [<plane>] , [<NMEA-rep>] , [<third- 
party-address>] 

+CME ERROR: <err> 
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+CMOLR=? 



+CMOLR: (list of supported <enable>s) , (list of 
supported <method>s) , (list of supported <hor- 
acc-set>s) , ( list of supported <hor-acc>s), (list 
of supported <ver-req>s) , (list of supported <ver- 
acc-set>s) , (list of supported <ver-acc>s) , (list 
of supported <vel-req>s) , (Ustof supported <rep- 
inode>s) , (list of supported < timeout >s) , (list of 
supported <interval>s) , (list of supported 
< shape- rep >s) , (list of supported 
<plane>s) , (list of supported <NMEA- rep >s) , (list 
of supported <third-party-address>s) 



Description 

Set command initiates a mobile originated location request (MO-LR). The parameter <enable> enables or disables 
positioning and reporting by unsolicited result codes. Reporting can be performed in the format of GAD shapes 
<location_parameters> or in the format of NMEA strings <NMEA-string> or both. The method to use for 
positioning is decided by the parameter <method>. The parameters <hor-acc-set>, <hor-acc>, <ver-req>, 
<ver-acc-set>, <ver-acc> and <vel-req> indicate accuracy for the MO-LR. The parameter <timeout> 
indicates how long the MS will wait for a report before an unsolicited result code is provided. A single report or 
periodic reports can be requested by the parameter < rep- mode >. If periodic reports are requested, the time interval 
between the reports is specified by the parameter < interval >. If GAD shapes are requested, the GAD shapes that 
will be accepted in the unsolicited result code <location_parameters> are defined by the parameter <shape- 
rep>. The parameter <plane> specifies the signalUng to use for MO-LR. The parameter <NiyiEA-rep> indicates 
possible restrictions in supported NMEA strings. The parameter <third-party-address> is used to specify the 
address when reporting to a third party is specified. Additional information about positioning can be found in 
3GPP TS 25.305 [77]. If positioning-data cannot be provided at a timeout, the unsolicited result +CMOLRE is provided. 
Refer subclause 9.2 and subclause 9.3 for possible <err> values. 

Read command returns the current settings of the parameters <enable>, <method>, <hor-acc-set>, <hor- 
acc>, <ver-req>, <ver-acc-set>, <ver-acc>, <vel-req>, <rep-mode>, <timeout>, <interval> 
<shape-rep>, <plane>, <NMEA-rep> and <third-party-address>. The parameters <hor-acc>, <ver- 
acc-set>, <ver-acc> and <plane> are only applicable in certain configurations. The parameter <interval> 
is only appUcable if periodic reporting is specified. The parameter <NMEA-rep> is only applicable if reporting is 
specified by NMEA strings.The parameter <third-party-address> is only applicable if reporting to third party 
is specified. 

Test command returns the supported values and ranges. 
Defined values 

<enable>: integer type. Enables and disables reporting location as a result of a MO-LR. Only one <method> can 
be enabled at any given time. 

Disables reporting and positioning. 

1 Enables reporting of NMEA strings by unsolicited result code +CMOLRN : <NMEA- string>. 
Lack of data at each timeout is indicated by an unsolicited result code +CMOLRE. 

2 Enables reporting of GAD shapes by unsolicited result code +CMOLRG : <location_parameters>. 
Lack of data at each timeout is indicated by an unsolicited result code +CMOLRE. 

3 Enables reporting of NMEA strings and GAD shapes by unsolicited result codes 

+CMOLRG: <location_parameters> and +CMOLRN : <NMEA- string>. 
Lack of data at each timeout is indicated by an unsolicited result code +CMOLRE. 

NOTE 1: The string of <location_parameters> intended for +CMOLR can be split into multiple unsolicited 
result codes e.g. in order to prevent that the string in the unsolicited result code becomes too long. How to 
split the string is implementation specific. 
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<method>: integer type. Method for MO-LR. The default value is implementation specific. 

Unassisted GPS. Autonomous GPS only, no use of assistance data. 

1 Assisted GPS (see NOTE 2). 

2 Assisted GANSS (see NOTE 2). 

3 Assisted GPS and GANSS (see NOTE 2). 

4 Basic self location (the network determines the position technology). 

5 Transfer to third party. This method makes the parameters < shape -rep> and <NMEA-rep> irrelevant 
(any values are accepted and disregarded). The third party address is given in the parameter <third- 
party-address>. (see NOTE 3) 

NOTE 2: For the methods that require assistance data, the assistance data obtained from the network is used for a 
UE-based GPS location procedure. 

NOTE 3: Lack of data at each timeout is not indicated by an unsolicited result code +CMOLRE if reporting to third 
party is specified. 

<hor-acc-set>: integer type. 

Horisontal accuracy not set/specified. 

1 Horizontal accuracy set in parameter <hor-acc>. 

<hor-acc>: integer type. Requested accuracy as horizontal uncertainty exponent (refer to 3GPP TS 23.032 [76] 
subclause 6.2). The value range is 0-127. The default value is implementation specific. 

<ver-req>: integer type. 

Vertical coordinate (altitude) is not requested, 2D location fix is acceptable. The parameters <ver- acc - 
set> and <ver-acc> do not apply. 

1 Vertical coordinate (altitude) is requested, 3D location fix is required. 

<ver-acc-set>: integer type. 

Vertical accuracy not set/specified. 

1 Vertical accuracy set/specified in parameter <ver-acc>. 

<ver-acc>: integer type. Requested accuracy as vertical uncertainty exponent (refer to 3GPP TS 23.032 [76] 
subclause 6.4). The value range is 0-127. The default value is implementation specific. 

<vel - req>: integer type. Requested velocity type (refer to 3GPP TS 23.032 [76] subclause 8.6). 

Velocity not requested. 

1 Horizontal velocity requested. 

2 Horizontal velocity and vertical velocity requested. 

3 Horizontal velocity with uncertainty requested. 

4 Horizontal velocity with uncertainty and vertical velocity with uncertainty requested. 
<rep-mode>: integer type. Reporting mode. The default value is implementation specific. 

Single report, the timeout for the MO-LR response request is specified by < t imeout > . 

1 Periodic reporting, the timeout for each MO-LR response request is specified by <t imeout > and the 
interval between each MO-LR is specified by < interval >. 
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<timeout >: integer type. Indicates how long the MS will wait for a response after a MO-LR. The value range is in 
seconds from 1 to 65535. The default value is implementation specific. 

< interval >: integer type. The parameter is applicable to periodic reporting only. Determine the interval between 
periodic MO-LRs. The value range is in seconds from 1 to 65535, and must be greater than or equal to 
<tinieout>. The default value is implementation specific. 

<shape-rep>: integer type. This parameter is a sum of integers each representing a certain GAD shape that will 
be accepted in the unsolicited result code <location_paraTneters>. Note that only one GAD shape is 
present per unsolicited result code. The default value is implementation specific. 

1 ElUpsoid point. 

2 Ellipsoid point with imcertainty circle. 
4 Ellipsoid point with uncertainty ellipse. 
8 Polygon. 

16 Ellipsoid point with altitude. 

32 Ellipsoid point with altitude and uncertainty elUpsoid. 
64 Ellipsoid arc. 

<plane>: integer type. The parameter specifies whether the control plane or SUPL will be used for MO-LR. 

Control plane. 

1 Secure user plane (SUPL). 

<NMEA-rep>: string type. The supported NMEA strings are specified as a comma separated values inside one 
string. If the parameter is omitted or an empty string is given, no restrictions apply and all NMEA strings are 
supported. The default value is that all strings are supported. 

Example of NMEA strings: "$GPRMC,$GPGSA,$GPGSV" 

<third-party-address>: string type. The parameter is applicable to reporting to third party only, and 
specifies the address to the third party. This parameter has to be specified when <enable> value is set to 5. 

<location_parameters>: string type in UTF-8. This parameter provides XML-formatted strings of GAD- 
shape positioning data as defined in table 8.50-2. This parameter shall not be subject to conventional character 
conversion as per +CSCS. The XML according to the DTD in table 8.50-2 may be provided in one or multiple 
unsolicited result codes. 

Table 8.50-2: XML DTD for <locatlon_paraineters> 

<?xml version="l . 0" ?> 

<!DOCTYPE location_parameters [ 

< ! ELEMENT location_parameters (time? , direction? , shape_data, velocity_data? ) > 
<!ELEMENT time (#PCDATA) > 
<!ELEMENT direction {#PCDATA) > 
< ! ELEMENT shape_data 

(ellipsoid_point | ellipsoid_point_uncert_circle | ellipsoid_point_uncert_ellipse | po 
lygon | ellipsoid_point_alt | ellipsoid_point_alt_uncertellipse | ellips_arc) > 
<! ELEMENT ellipsoid_point (coordinate) > 

<! ELEMENT coordinate ( latitude , longitude) > 
<! ELEMENT latitude (north, degrees) > 
<! ELEMENT north (#PCDATA) > 
<! ELEMENT degrees (#PCDATA) > 
<! ELEMENT longitude (#PCDATA) > 
< ! ELEMENT ellipsoid_point_uncert_circle (coordinate , uncert_circle) > 

<! ELEMENT uncert_circle (# PCDATA ) > 
<! ELEMENT ellipsoid_point_uncert_ellipse (coordinate, uncert_ellipse) > 
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<! ELEMENT uncert_ellipse 
(uncert_semi_major, uncert_semi_minor , orient_major, confidence) > 
<! ELEMENT uncert_semi_ma j or {#PCDATA) > 
<! ELEMENT uncert_semi_minor (# PCDATA) > 
<! ELEMENT orient_ma j or (#PCDATA)> 
<!ELEMENT confidence (# PCDATA) > 
<!ELEMENT polygon {coordinate+) > 

<!ELEMENT ellipsoid_point_alt (coordinate , altitude) > 
<! ELEMENT altitude (height_above_surf ace, height) > 
<! ELEMENT height_above_surf ace {# PCDATA ) > 
<! ELEMENT height {#PCDATA) > 
< ! ELEMENT ellipsoid_point_alt_uncertellipse 
(coordinate , altitude , uncert_semi_Tnaj or, uncert_semi_minor , orient_maj or, confidence 
,uncert_alt) > 

<! ELEMENT uncert_alt (#PCDATA) > 
< ! ELEMENT ellips_arc 
(coordinate , inner_rad, uncert_rad, of f set_angle , included_angle , confidence) > 
<! ELEMENT inner_rad (# PCDATA ) > 
<! ELEMENT uncert_rad (#PCDATA) > 
<! ELEMENT offset_angle (# PCDATA ) > 
<! ELEMENT included_angle (# PCDATA ) > 
<! ELEMENT velocity_data 
(hor_velocity? , vert_velocity? , vert_velocity_direction? , hor_uncert? , vert_uncert? ) 
> 

<!ELEMENT hor_velocity (# PCDATA ) > 

<!ELEMENT vert_velocity (# PCDATA ) > 

< 'ELEMENT vert_velocity_direction (#PCDATA) > 

<! ELEMENT hor_uncert (# PCDATA ) > 

<! ELEMENT vert_uncert (# PCDATA ) > 

] > 



<NMEA- string>: string type in UTF-8. This parameter provides an NMEA-string as defined in lEC 61 162 [78]. 
This parameter shall not be subject to conventional character conversion as per +CSCS. 

Example: +CMOLRN: "$GPRMC,235947.000,V,0000.0000,N,00000.0000,E,„041299„*1D<CR><LF>&" 

Implementation 

Optional. 

8.51 Backlight +CBKLT 



Table 8.51-1 : +CBKLT parameter command syntax 



Command 


Possible response(s) 


+CBKLT=<state> [ , <du 
ration>] 


+CME ERROR: <err> 


+CBKLT? 


+CBKLT: <state>, [<duration>] 
+CME ERROR: <err> 


+CBKLT=? 


+CBKLT : (list of supported <state>s) 
+CME ERROR: <err> 



Description 

This command is used to enable or disable the backlight of the MT"s main display. The backUght can be enabled 
indefinitely or the duration shall be indicated as a specified period of time (in seconds). Refer subclause 9.2 for possible 
<err> values. 
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Read command returns the current state and duration (in seconds) if applicable. 
Test command returns supported values as compound value. 
Defined values 

< s t a t e > : integer type 

disable 

1 enable for the duration specified 

2 enable indefinitely 

3 enable for a short duration specified by the UE manufacturer 
<duration>: integer type 

xxxx in seconds 
Implementation 
Optional. 

8.52 Command Touch Screen Action +CTSA 



Table 8.52-1 : +CTSA action command syntax 



Command 


Possible response(s) 


+CTSA=<action> , <x>, <y> 


+CME ERROR: <err> 


+CTSA=? 


+CTSA: (Ust of supported <action>s) 



Description: 

This command is used to emulate a touch screen action on the mobile equipment (ME). If emulation fails with an ME 
error, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. 

This command should be accepted (OK returned) before actually emulating the touch screen action. 

Test command returns the list of supported actions for the mobile equipment. 

The top left corner of the screen is defined as the 0, point, see figure 8.52-1. This coordinate does not change 
regardless of the display mode (portrait or landscape). All coordinate values are non-negative integers. 
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Figure 8.52-1 : ME screen outline 



Defined values 

<action>: integer type 

Release. Emulates the user releasing the touch screen at the <x>, <y> coordinates. 

1 Depress. Emulates the user depressing the touch screen at location <x>, <y>. 

NOTE: Consecutive Depress actions will emulate dragging a stylus on the touch device to the new location. 

2 Single Tap. Emulates the user performing a single tap action at the <x>, <y> location. The timing required 
to emulate a single tap shall be handled by the mobile equipment. 

3 Double Tap. Emulates the user performing a double tap action at the <x>, <y> location. The timing required 
to emulate a double tap shall be handled by the mobile equipment. 

<x>: integer type. The horizontal x coordinate location of the action performed on the touch screen. 

<y>: integer type. The vertical y coordinate location of the action performed on the touch screen. 



Examples: 
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User Action 


Syntax 


Description 


Depress 


AT+CTSA=1, 25, 45 


This will emulate a user pressing 
down on the ME touch screen at 
the 25, 45 coordinates. 


Release 


AT+CTSA=0,25,45 


This will emulate a user releasing 
the touch screen at the 25, 45 
coordinates. 


Single Tap 


AT+CTSA=2,25,45 


This will emulate a user single 
tapping the touch screen at the 
25, 45 coordinates. 


Double Tap 


AT+CTSA=3,25,45 


This will emulate a user double 
tapping the touch screen at the 

25, 45 coordinates. 


Drag 


AT+CTSA=1, 10, 10; 
+CTSA=0, 50, 50 


This will emulate a user touching 
at 10,10, dragging to 50,50, and 
releasing. 


Draw 


AT+CTSA=1, 10, 10; 
+CTSA=l, 50, 50; 
+CTSA=0, 100, 100 


This will emulate a user touching 
at 10,10, then dragging to 50,50, 
then dragging to 100,100 and 
finally releasing the touch screen 
at 100,100. 



Implementation 

Optional. 

8.53 Command Screen Orientation +CSO 

Table 8.53-1 : +CSO parameter command syntax 



Command 


Possible response(s) 


+CSO=<orientation> 


+CME ERROR: <err> 


+CSO? 


+CSO: <orientation> 

+CME ERROR: <err> 


+CSO=? 


+CSO : (list of supported <orientation>s) 
+CME ERROR: <err> 



Description 

This command is used to set or read back the orientation of the screen on the mobile equipment (ME). The mobile 
equipment (ME) may override the setting via a key press or touch screen action. The physical orientation of the ME 
shall not override this command. If emulation fails with an ME error, +CME ERROR : <err> is returned. Refer 
subclause 9.2 for <err> values. 

This command should be accepted (OK returned) before actually performing the action. 
Test command returns the Ust of supported orientations for the mobile equipment. 
Defined values 

<orientation>: integer type 

Portrait. The device is in portrait mode. 

1 Landscape. The device is in landscape mode. 
Examples: 
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Action 


Syntax 


Description 


Get Orientation 


AT+CSO? 


This will return the current 
orientation of the screen device. 


Set Orientation 


AT+CSO=0 


This will set the current orientation 
of the screen device to portrait. 



Imple mentation 

Optional. 

8.54 Command Screen Size +CSS 

Table 8.54-1 : +CSS action command syntax 



Command 


Possible response(s) 


+ CSS 


+CSS : <Max_X> , <Max_Y> 
+CME ERROR: <err> 


+css=? 





Description 

The execution of this command will get the size (in pixels) of the ME screen. 

The X-axis and y-axis will be based on a single normal operating mode of the ME, see figure 8.54-1. The 0,0 point will 
always be located at the top left corner of the screen in the normal operating mode. Changing the phone"s mode from 
portrait to landscape does not change the physical location of 0,0 or how the x and y axes are interpreted. 

If emulation fails with an ME error, +CME ERROR : <err> is returned. Refer subclause 9.2 for <err> values. This 
command should be accepted (OK returned) before returning the screen size of the device. 



□ □□□ 

□ □□□ 

□ □□□ 



0,0 



Y 
■4- 



□ □□□□□□□ 

□ □□□□□□□ 



Figure 8.54-1 : ME screen outline 

Defined values 

<Max_X>: integer type. Must be a positive integer representing the maxium width of the screen. 
<Max_Y>: integer type. Must be a positive integer representing the maximum height of the screen 
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Implementation 

Optional. 

8.55 Positioning Control +CPOS 



Table 8.55-1 : +CPOS Action Command Syntax 



Command 


Possible response(s) 


+CPOS<CR> 

text is entered <ctrl - Z/ESC> 


+CME ERROR: <err> 


+CPOS=? 





Description 

Execution conunand causes the TE to enter a transparent mode for sending XML formatted data according to 
table 8.55-2: XML DTD for <pos>. 

Subsequent to +CPOS: 

the TA shall send a two character sequence <CR><LF> after command line is terminated with <CR>. Then text 
can be entered from TE to ME/TA. 

- the echoing of entered characters back from the TA is controlled by V.25ter echo command E. 

sending may be cancelled by giving <ESC> character (IRA 27). 

<ctrl-Z> (IRA 26) shall be used to indicate the ending of the message body. 
Refer subclause 9.2 for possible <err> values. 
Test command returns the supported values and ranges. 
Defined events 

<location>: string type in UTF-8. This parameter provides an XML-formatted string of GAD-shape positioning 
data similar to what is defined in table 8.55-3. This parameter shall not be subject to conventional character 
conversion as per +CSCS. 

<assist_data>: string type in UTF-8. This parameter provides an XML-formatted string of assistance data as 
defined in table 8.55-5. This parameter shall not be subject to conventional character conversion as per +CSCS. 

<pos_meas>: string type in UTF-8. This parameter provides an XML-formatted string of position measurements 
data request as defined in table 8.55-8. This parameter shall not be subject to conventional character conversion 
as per +CSCS. 

<pos_meas_req>: string type in UTF-8. This parameter provides an XML-formatted string of position 

measurements request data as defined in table 8.55-9. This is an alternative to <pos_meas>. This parameter shall 
not be subject to conventional character conversion as per +CSCS. 

<GPS_meas>: string type in UTF-8. This parameter provides an XML-formatted string of GPS measurement data 
as defined in table 8.55-10. This parameter shall not be subject to conventional character conversion as per 
+CSCS. 

<GNSS_meas>: string type in UTF-8. This parameter provides an XML-formatted string of GPS measurement data 
as defined in table 8.55-1 1 for LPP procedures and GANSS procedures in RRLP and RRC. This parameter shall 
not be subject to conventional character conversion as per +CSCS. 
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<GPS_assist_req>: string type in UTF-8. This parameter provides an XML-formatted string for requesting 
GPS assistance data as defined in table 8.55-12. This parameter shall not be subject to conventional character 
conversion as per +CSCS. 

<GNSS_assist_req>: string type in UTF-8. This parameter provides an XML-formatted string for requesting 
GNSS assistance data as defined in table 8.55-15. This parameter shall not be subject to conventional character 
conversion as per h-CSCS. 

<capability_req> string type in UTF-8. This parameter provides an XML-formatted string for requesting 
capability data as defined in table 8.55-4. This parameter shall not be subject to conventional character 
conversion as per +CSCS. 

<capabilities> string type in UTF-8. This parameter provides an XML-formatted string for providing 
capability data as defined in table 8.55-4. This parameter shall not be subject to conventional character 
conversion as per +CSCS. 

<msg>: string type in UTF-8. This parameter provides an XML-formatted string for communicating simple 

messages as defined in table 8.55-13. This parameter shall not be subject to conventional character conversion as 
per +CSCS. 

<pos_err>: string type in UTF-8. This parameter provides an XML-formatted string of positioning error 

parameters as defined in table 8.55-14. This parameter shall not be subject to conventional character conversion 
as per +CSCS. 

NOTE 1: An XML-formatted string intended for +CPOS can be split e.g. in order to prevent that the string becomes 
too long. Where to split an XML-formatted string is implementation specific. 



Table 8.55-2: XML DTD for <pos> 



<?xml version= " 1 . " ?> 




< IDOCTYPE pos [ 




<! ELEMENT pos 




( location 1 GNSS provided location information | assist data | pos meas 


pos meas req | G 


PS_meas | GNSS_meas* | GPS_assist_req | | GNSS_assist_req | capability_req 


capabilities |m 


sg 1 pos_err) > 




<!ATTLIST pos protocol (RRLP | RRC | LPP) #IMPLIED 




transaction id CDATA #IMPLIED> 

] > 





NOTE 2: The XML DTD for "pos " is the top-level definition of all positioning events, containing elements going 
in both directions between the MS and the network. The subelements of "pos " are superset definitions 
of the positioning events. A variable amount of these elements can be sent. Sent elements must follow the 
rules for the XML, e.g. elements postfixed by " ? " and can occur zero or more times. The total delivery 
must be a complete specification. Sub-elements cannot be deUvered without being preceeded with an 
element reference from the above level. 

Table 8.55-3: XML DTD for <location> 



< ! ELEMENT location ( location_parameters , time_of_f ix? , time_assistance? ) > 

<! ELEMENT time_of_fix {# PCDATA ) > 

< ! ELEMENT time_assistance 
{GPS_time, {GSM_time | WCDMA_time | LTE_time) ?, TimeUnc? , Strobe? ) > 



NOTE 3: The element " location_jparameters " provides one or more XML-formatted strings of GAD-shape 
positioning data as defined in table 8.50-2. 

Table 8.55-4: XML DTD for <capability_req>,<capabilities> 

<! ELEMENT capability_req EMPTY> 
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<! ELEMENT capabilities 




{GPS_method? , GNSS_method* , GPS_aid? , GNSS_aid? , GPS_assist_req? ) > 




<! ELEMENT GPS Method (MSA sup?, MSB sup? , Standalone sup?)> 




< ! ELEMENT MSA_sup EMPTY> 




<!ATTLIST MSA_sup fta_sup CDATA "000"> <!-- as LPP f ta-MeasSupport --> 


<! ELEMENT MSB sup EMPTY> 




<!ATTLIST MSB sup fta sup CDATA "000" 




V J. w V — _i_ y o '-^ K-^ \ J- LA ^ j_ -1.0^/ J- -1- ^ 




<! ELEMENT Standalone sup EMPTY> 




< ! ATTLIST Standalone sup fta sup CDATA " 000 " 




<r 1 a c; T.pp "Ft" a -Mpa c'SllTTnO'T't" *> 

^ • n i3 J— 1 C C J- 1^ n 1*1^ n is \J LJ. ^/ ^/ J- ^ 




TT-pii oP"itv "^iiTn ft"me 'F;^1'=!e) "■F;^1'=!e"'> 




<! ELEMENT GNSS Method (MSA sup?, MSB sup? , Standalone sup?)> 




<!ATTLIST GNSS Method supported signal 




(GPS Ll 1 GPS Lir 1 GPS L2rlGPS 1 SBAS LI 1 GLO Gl 1 GLO G2 1 GLO G^ 1 "GPS 


Ll " > 


< ! ELEMENT GPS aid 




(almanac sup?,UTC model sup? , ionospheric sup?,nav model sup?,DGPS 


_sup? , ref_loc_s 


up? , ref_time_sup? , acquisition_sup? , rt_integr_sup? ) > 




< ! ELEMENT almanac sup EMPTY> 




<! ELEMENT UTC_model_sup EMPTY> 




<! ELEMENT ionospheric sup EMPTY> 




<! ELEMENT nav_model_sup EMPTY> 




<! ELEMENT DGPS_Sup EMPTY> 




<! ELEMENT ref_loc_Sup EMPTY> 




<! ELEMENT ref time sup EMPTY> 




<! ELEMENT acquisition sup EMPTY> 




<! ELEMENT rt integr sup EMPTY> 




<! ELEMENT GNSS aid (ionospheric sup?, ref loc sup?, ref time sup?, earth orient 


sup? , GNSS_aid_f or_one_gnss*) > 




<! ELEMENT earth orient sup EMPTY> 




<! ELEMENT GNSS aid for one gnss 




(orbit sup*, clock sup* , acquisition sup?,rt integr sup?)> 




<! ATTLIST GNSS aid for one gnss 




gnss_id (SBAS | MGPS | QZSS | Glonass | GPS) #IMPLIED 




sbas_id (WASS | EGNOS | MSAS | GAGAN) #IMPLIED> 




<! ELEMENT orbit_sup EMPTY> 




<!ATTLIST orbit_sup model (2|3|4|5) #REQUIRED> 




<!-- 2=GPS NAV, 3=GPS CNAV, 4=Glonass, 5=SBAS --> 




<! ELEMENT clock_sup EMPTY> 




<! ATTLIST clock_sup model (2|3|4|5) #REQUIRED> 





Table 8.55-5: XML DTD element for <assist data> 



<! ELEMENT assist_data 

(GPS_assist? , GNSS_assist? ,msr_assist_data? , system_inf o_assist_data? , more_assist_ 
data? , ext_container? , rel98_assist_data_ext? , rel5_assist_data_ext? , rel7_assist_da 
ta_ext?) > 

<! ELEMENT GPS_assist 

( status_health? , BTS_clock_drif t? , ref_time* , location_parameters? , DGPS_corrections 
? , nav_model_elem* , ionospheric_model? , UTC_model? , almanac? , acqu_assist* , GPS_rt_int 
egrity?) > 

<! ELEMENT status_health (#PCDATA) > 

<! ELEMENT BTS_clock_drif t (# PCDATA ) > 

<! ELEMENT ref_time 

(GPS_time |GNSS_time) , (GSM_time | WCDMA_time | LTE_time) ?, TimeUnc? , Strobe? , GPS_TOW_as 
sist*) > 

<! ELEMENT GPS_time (GPS_TOW_msec , GPS_week) > 

<! ELEMENT GPS_TOW_msec (# PCDATA ) > 

<! ELEMENT GPS_week (#PCDATA) > 
< lELEMENT GPS_TOW_assist ( sat_id, tlm_word, ant i_sp , alert , tlm_res) > 

<! ELEMENT sat id (# PCDATA ) > 
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<! ELEMENT tlm_word (# PCDATA ) > 

<! ELEMENT anti_sp (# PCDATA ) > 

<! ELEMENT alert {#PCDATA) > 

<! ELEMENT tlm_res (#PCDATA) > 
<! ELEMENT DGPS_corrections 
{sat_id, IODE,UDRE, PRC, RRC, delta_PRC2?,delta_RRC2?) > 
<! ELEMENT lODE {#PCDATA) > 
<! ELEMENT UDRE {#PCDATA) > 
<! ELEMENT PRC (# PCDATA ) > 
<! ELEMENT RRC {# PCDATA ) > 
<! ELEMENT delta_PRC2 {#PCDATA) > 
<! ELEMENT delta_RRC2 (# PCDATA ) > 
<! ELEMENT nav_model_elem (sat_id, sat_status , ephem_and_clock? ) > 
<! ELEMENT sat_status EMPTY> 

<!ATTLIST sat_Status literal {NS_NN-U | ES_NN-U | NS_NN | ES_SN | REVD) 

#REQUIRED> 

<! ELEMENT ephem_and_clock 
{12_code, ura, sv_health, iodc, 12p_f lag, esrl,esr2,esr3,esr4, tgd, toe, af 2 , af 1 , af , crs 
, delta_n,mO , cue, ecc, cus , power_half , toe, f it_f lag, aoda, cic, omegaO , cis, iO , crc, omega 
, omega_dot , idot , derived? ) > 







1 9 rorlf= fJiPmATAl ^ 


< 
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ELEMENT 


iodc (JiPCDATAl > 




ELEMENT 


1 ?n flaa f PCDATA 1 ^ 




T?TiT?MT?NT 

.Ci J-l.di'l.CilN J. 


(=ci-r1 ^JiPfDATA^ ^ 




ELEMENT 


e'3r2 fJtPCDATA) > 


< 


ELEMENT 


esr3 (#PCDATA) > 


< 


ELEMENT 


esr4 {#PCDATA) > 


< 


ELEMENT 


tgd (ttPCDATA) > 


< 


ELEMENT 


toe (#PCDATA) > 


< 


ELEMENT 


af2 (#PCDATA)> 


< 


ELEMENT 


afl (#PCDATA)> 


< 


ELEMENT 


af {#PCDATA) > 


< 


ELEMENT 


crs {#PCDATA) > 


< 


ELEMENT 


delta_n (# PCDATA) > 


< 


ELEMENT 


mO {# PCDATA) > 


< 


ELEMENT 


cue {#PCDATA) > 


< 


ELEMENT 


ecc (#PCDATA) > 


< 


ELEMENT 


eus (#PCDATA)> 


< 


ELEMENT 


power_half (#PCDATA) > 


< 


ELEMENT 


toe {#PCDATA) > 


< 


ELEMENT 


f it_f lag (ttPCDATA) > 


< 


ELEMENT 


aoda (# PCDATA )> 


< 


ELEMENT 


cic {#PCDATA) > 


< 


ELEMENT 


omegaO {#PCDATA) > 


< 


ELEMENT 


cis (#PCDATA) > 


< 


ELEMENT 


iO (#PCDATA)> 


< 


ELEMENT 


crc (#PCDATA)> 


< 


ELEMENT 


omega (#PCDATA) > 


< 


ELEMENT 


omega dot (#PCDATA) > 


< 


ELEMENT 


idot (#PCDATA)> 


< 


ELEMENT 


derived EMPTY> <!-- data derived locally, e.g from EE --> 



< ! ELEMENT ionospheric_model 
{alfa0,alfal,alfa2,alfa3,beta0,betal, beta2 , beta3 ) > 
<! ELEMENT alfaO (# PCDATA ) > 
< 'ELEMENT alfal {#PCDATA) > 
<!ELEMENT alfa2 {#PCDATA) > 
<! ELEMENT alfa3 (#PCDATA) > 
<!ELEMENT betaO (#PCDATA) > 
< 'ELEMENT betal {#PCDATA) > 
<! ELEMENT beta2 {#PCDATA) > 
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<! ELEMENT beta3 (# PCDATA ) > 
<! ELEMENT UTC_model (al , aO , tot , wnt , dtls , wnlsf , dn, dtlsf ) > 

<! ELEMENT al {#PCDATA) > 

<! ELEMENT aO (# PCDATA ) > 

<! ELEMENT tot (#PCDATA) > 

<! ELEMENT wnt (#PCDATA) > 

< 'ELEMENT dtls {#PCDATA) > 

<! ELEMENT wnlsf {#PCDATA) > 

<! ELEMENT dn (# PCDATA ) > 

< 'ELEMENT dtlsf {# PCDATA ) > 
< ! ELEMENT almanac { wna , alm_elem* ) > 

<! ELEMENT wna (#PCDATA) > 

<! ELEMENT alm_elem 

(data_id? , sat_id, alm_ecc , alm_toa, alm_k;sii , alm_omega_dot , alm_sv_health, alm_power 
half , alm_omegaO , alm_omega, alm_mO , alm_af , alm_af 1) > 

<! ELEMENT data_id {#PCDATA) > 

<! ELEMENT alm_ecc (#PCDATA) > 

<! ELEMENT alm_toa {# PCDATA ) > 

<! ELEMENT alm_ksii {#PCDATA) > 

<! ELEMENT alm_omega_dot (# PCDATA ) > 

<! ELEMENT alm_sv_health (# PCDATA ) > 

<! ELEMENT alm_j)ower_half {#PCDATA) > 

<! ELEMENT alm_omegaO (#PCDATA) > 

<! ELEMENT alm_omega (# PCDATA ) > 

<! ELEMENT alm_mO (# PCDATA ) > 

<! ELEMENT alm_afO {# PCDATA ) > 

<! ELEMENT alm_afl {#PCDATA) > 
<! ELEMENT GPS_rt_integrity (#PCDATA) > 
<! ELEMENT msr_assist_data EMPTY> 
<! ELEMENT system_inf o_assist_data EMPTY> 
<! ELEMENT more_assist_data EMPTY> 
<! ELEMENT ext_container EMPTY> 
<!ELEMENT rel98_assist_data_ext EMPTY> 
<! ELEMENT rel5_assist_data_ext EMPTY> 
<! ELEMENT rel7 assist data ext EMPTY> 



NOTE 4: For the elements and the value ranges of assistance data information delivered from the network, refer to 
3GPP TS 25.331 [74] (subclause 10.3.7.90) and 3GPP TS 44.031 [79] (subclause A.4.2.4). The value 

ranges of the relevant parameters are described in the ASN.l syntax. 

NOTE 5: For the element " locat ion_parameters " , see table 8.50-2. In the context of this XML, the 
" location_parameters "will describe a reference location. 

NOTE 6: The elements ext_container, rel98_assist_data_ext, rel5_assist_data_ext and rel7_assist_data_ext are 
depreciated. 

Table 8.55-6: XML DTD for <GSM_time>,<WCDMA_time>,<LTE_time>,<TimeUnc>,<Strobe> 



<! ELEMENT GSM_time 

(f rame_number , f rame_number_msb, time_slot_number , bit_number , BCCH_carrier? , BSIC? ) > 
<! ELEMENT frame_number (# PCDATA ) > 
<! ELEMENT f rame_nuTnber_msb (# PCDATA ) > 
<! ELEMENT time_slot_number (#PCDATA) > 
<! ELEMENT bit_number (#PCDATA) > 
<! ELEMENT BCCH_carrier (#PCDATA) > 
<! ELEMENT BSIC (#PCDATA) > 

<!ELEMENT WCDMA_time (cell_timing_chips , (FDD_CPICH | TDD_cell_id | SEN) ) > 
<!ELEMENT cell_timing_chips (# PCDATA) > 
<! ELEMENT FDD_CPICH (# PCDATA ) > 
<! ELEMENT TDD_cell_id {#PCDATA) > 
<! ELEMENT SEN (#PCDATA) > 
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<! ELEMENT LTE_time (physCellld, cellGloballdEUTRA? , earf cn) > 
<! ELEMENT physCellld {#PCDATA) > 
<! ELEMENT cellGloballdEUTRA {#PCDATA) > 
<!ELEMENT earfcn (#PCDATA) > 

<! ELEMENT TimeUnc EMPTY> 
<!ATTLIST TimeUnc 

Value CDATA "12 7" 

units (s I ms I us I rrlp_k I rrc_k I lpp_k) "rrc_k"> 

<! ELEMENT Strobe (EMPTY) > <!-- the GPS time relates to a strobe generated by the 
modem - - > 



Table 8.55-7: XML DTD for <acqu_assist> 



<!ELEMENT acqu_assist {tow_msec, sat_inf o*) > 
<! ELEMENT tOW_msec {#PCDATA) > 
<! ELEMENT sat_info 
(sat_id, doplO , dopl_extra? , code_ph, code_ph_int , GPS_bitno, srch_w, az_el? ) > 
<! ELEMENT doplO {#PCDATA) > 

<!ATTLIST doplO units (rrlp | rrc | Ipp | Hz | mps) "rrlp"> 
<!-- rrlp gps is 2.5 Hz --> 
<!-- rrc gps is 2.5 Hz --> 
<!-- Ipp gnss is 0.5 m/s --> 
<!ELEMENT dopl_extra (dopll , dopll_uncert) > 
<!ELEMENT dopll (# PCDATA ) > 

<!ATTLIST dopll units (rrlp | rrc | Ipp) "rrlp"> 
<!-- rrlp is 1/42 Hz/s --> 
<!-- rrc is 0.023 Hz/s --> 
<!-- Ipp is 1/210 m/s/s --> 
<! ELEMENT dopll_uncert EMPTY> 

<!ATTLIST dopll_uncert literal {hzl2- 
5 |hz25 |hz50 |hzlOO |hz200) #REQUIRED> 
<! ELEMENT code_ph (# PCDATA ) > 

<!ATTLIST code_ph units (chips |ms) "chips"> 

<!-- chips used for GPS in RRLP and RRC, ms used for LPP --> 
<! ELEMENT code_ph_int (#PCDATA) > 
<! ELEMENT GPS_bitno {# PCDATA ) > 
<! ELEMENT srch_w {#PCDATA) > 
<! ELEMENT az_el (az,elev)> 
<! ELEMENT az (# PCDATA ) > 

<!ATTLIST az_el units (rrlp | Ipp | degree) "rrlp"> 
<!-- rrlp and rrc have units of 11.25 degree --> 
<!-- Ipp has units of 0.703125 degrees --> 
<! ELEMENT elev (#PCDATA) > 



NOTE 7: Units of mps, Ipp and ms are used with GNSS procedures. 

Table 8.55-8: XML DTD element for <pos_ineas> 



< ! ELEMENT pos_meas (meas_abort | RRLP_meas | RRC_meas) > 
< ! ELEMENT meas_abort EMPTY> 
<! ELEMENT RRLP_meas (RRLP_pos_instruct ) > 
< ! ELEMENT RRLP_pos_instruct 
(RRLP_method_type, RRLP_method, resp_time_seconds , mult_sets) > 

< ! ELEMENT RRLP_method_type 
(ms_assisted | ms_assisted_no_accuracy | ms_based | ms_based_pref | ms_assisted_pref ) > 
<! ELEMENT ms_assisted (method_accuracy) > 
<! ELEMENT method_accuracy (# PCDATA ) > 
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<! ELEMENT ms_assisted_no_accuracy EMPTY> 

<! ELEMENT ms_based (method_accuracy) > 

<! ELEMENT ms_based_pref {method_accuracy) > 

<! ELEMENT ms_assisted_pref {method_accuracy) > 
< ! ELEMENT RRLP_Tnethod EMPTY> 

<!ATTLIST RRLP_method literal (gps) #REQUIRED> 
<! ELEMENT resp_time_seconds {#PCDATA) > 
<! ELEMENT mult_sets EMPTY> 

<!ATTLIST mult_sets literal (multiple | one) #REQUIRED> 
<!ELEMENT RRC_meas { rep_quant , rep_crit ) > 

<! ELEMENT rep_quant {RRC_method_type , RRC_method, hor_acc? , vert_acc? ) > 
<!ATTLIST rep_quant 

gps_timing_of_cell_wanted (true| false) "false" 
addl_assist_data_req (true | false) #REQUIRED> 

<! ELEMENT RRC_method_type EMPTY> 

<!ATTLIST RRC_method_type literal 
(ue_assisted | ue_based | ue_based_pref | ue_assisted_pref ) #REQUIRED> 
<! ELEMENT RRC_method EMPTY> 

<!ATTLIST RRC_method literal (otdoa | gps | otdoaOrGPS | celllD) 

#REQUIRED> 

<! ELEMENT hor_acc (# PCDATA ) > 
<! ELEMENT vert_acc (#PCDATA) > 
< ! ELEMENT rep_crit (no_rep | event_rep_crit | period_rep_crit) > 
<! ELEMENT no_rep EMPTY> 

<! ELEMENT event_rep_crit (event_par* ) > 

<! ELEMENT event_par (rep_amount , meas_interval , event_specif ic_inf o? ) > 
<!ATTLIST event_par report_f irst_f ix (true | false) #REQUIRED> 
<! ELEMENT rep_amount EMPTY> 

<!ATTLIST rep_amount literal 
(ral I ra2 | ra4 | ra8 | ral6 | ra32 | ra64 | ra- Infinity) #REQUIRED> 
<! ELEMENT meas_interval EMPTY> 

<!ATTLIST meas_interval literal 
(e5 I el5 I e60 I e300 I e900 I el800 I e3 600 I e72 00) #REQUIRED> 

<! ELEMENT event_specif ic_inf o 
(tr_pos_chg | tr_SFN_SFN_chg | tr_SFN_GPS_TOW) > 

<! ELEMENT tr_pos_chg EMPTY> 

<!ATTLIST tr_pos_chg literal 
(pclO |pc20 |pc30 |pc40 |pc50 IpclOO |pc200 |pc300 |pc500 |pclOOO |pc2000 |pc5000 |pclOOOO |p 
C20000 |pc50000 IpclOOOOO) #REQUIRED> 

<! ELEMENT tr_SFN_SFN_chg EMPTY> 

<!ATTLIST tr_SFN_SFN_chg literal (c0-25|c0- 
5 I Cl I C2 I c3 I C4 I c5 I ClO I C20 I c50 | ClOO | c200 | c500 | ClOOO | C2000 | C5000) #REQUIRED> 
<! ELEMENT tr_SFN_GPS_TOW EMPTY> 

<!ATTLIST tr_SFN_GPS_TOW literal 
(msl |ms2 |ms3 |ms5 |mslO |ms2 |ms50 |mslOO) #REQUIRED> 
<! ELEMENT period_rep_crit EMPTY> 

<!ATTLIST period_rep_crit rep_amount 
(ral I ra2 | ra4 | ra8 | ral6 | ra32 | ra64 | ra-Inf inity) " ra- Infinity " > 

<!ATTLIST period_rep_crit rep_interval_long (rilO | rilO -25 | rilO- 
5 I rill I ril2 | ril3 | ril4 | ril6 | rilS | rill2 | rill6 | ril2 | ril24 | ril2 8 | ril32 | ril64) 
#REQUIRED> 



NOTE 8: For the elements and the value ranges of position measurements data, refer to 3GPP TS 25.331 [74] 
(subclause 10.3.7.100) and 3GPP TS 44.031 [79] (subclause A.2). The value ranges of the relevant 
parameters are described in the ASN.l syntax. 

Table 8.55-9: XML DTD for <pos_meas_req> 



<!-- Alternative to pos_meas, supports RRLP, RRC and LPP --> 
<!ELEMENT pos_meas_req (abort | (req_info, qos) ) > 
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<!ATTLIST pos_meas_req aid_req_allowed (yes | no) #IMPLIED> <!-- Present for 
RRC and LPP procedures --> 
<! ELEMENT abort EMPTY) > 

<!ELEMENT req_info (GNSS_allowed_methods? ) > 
<!ATTLIST req_info loc_inf o_type 
{loc_req I meas_req | loc_pref | MSB_req | MSA_req | MSB_pref | MSA_pref ) "loc_req" 
velocity_req (true | false) "false" 
time_req (true | false) "false" 
multiple_sets (yes | no) "no" 

additional_inf o (yes | no) "no" > <!-- Ipp only --> <!-- MSB synonomous with 
loc_req --> 

<! ELEMENT GNSS_allowed_methods 
(gps_method? , sbas_method? , qzss_method? , glonass_method? ) > 
< ! ELEMENT gps_method EMPTY> 
<! ELEMENT sbas_method EMPTY> 
<! ELEMENT qzss_method EMPTY> 
<! ELEMENT glonass_method EMPTY> 
<!ELEMENT qos {response_time? , { report ing_interval , amount )?, hacc , vacc? ) > 
<!-- The presence of report ing_interval implies a periodic procedure --> 
<!-- The absence of reporting_interval implies a onehot procedure --> 
<! ELEMENT response_time EMPTY> 
<!ATTLIST response_time 
sec CDATA #IMPLIED 

rt_exp (rtl I rt2 I rt4 I rt8 I rtl6 I rt32 I rt64 I rtl28) #IMPLIED> <!-- sec 
optional in RRLP, LPP --> 

<! ELEMENT report ing_interval EMPTY> 
<!ATTLIST report ing_interval 

ri_exp 

(rill I ril2 | ril3 | ril4 | ril6 | ril8 | rill2 | rill6 | ril2 | ril24 | ril2 8 | ril32 | ril64) 
"ril20" > 

< ! ELEMENT amount EMPTY> 

<!ATTLIST amount amount (ral | ra2 | ra4 | ra8 | ral6 | ra32 | ra64 | ra-Inf inity) 
" ra-Inf inity" > 

<! ELEMENT hacc EMPTY> 

<!ATTLIST hacc 

accuracy_k CDATA #IMPLIED 

accuracy_m CDATA #IMPLIED 

confidence CDATA #IMPLIED> 
< ! ELEMENT vacc EMPTY> 

< ! ATTLIST vacc 

accuracy_k CDATA #IMPLIED 

accuracy_m CDATA #IMPLIED 

confidence CDATA #IMPLIED> 



Table 8.55-10: XML DTD element for <gps meas> 



<!ELEMENT GPS_meas {ref_time_only , meas_params* ) > 
<! ELEMENT ref _time_only {tow_msec) > 
< ! ELEMENT meas_params 
(sat_id, carr2_noise, dopl , whole_chips , f ract_chips , multi_path, psr_rms_err) > 
<!ELEMENT carr2_noise {#PCDATA) > 
<! ELEMENT dopl {#PCDATA) > 
<! ELEMENT whole_chips (#PCDATA) > 
<! ELEMENT fract_chips (# PCDATA) > 
<! ELEMENT multi_path EMPTY> 

<! ATTLIST multi_path literal {not_measured | low | medium | high) #REQUIRED> 
<! ELEMENT psr_rms_err {#PCDATA) > 
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NOTE 9: For the elements and the value ranges of GPS measurement data, refer to 3GPP TS 25.331 [74] 

(subclause 10.3.7.93) and 3GPP TS 44.031 [79] (subclause A.3.2.5). The value ranges of the relevant 
parameters are described in the ASN.l syntax. 

Table 8.55-1 1 : XML DTD element for <gnss meas> 



<! ELEMENT GNSS_meas (meas_params* ) > 

<!ATTLIST GNSS_meas gnss_id GPS | SBAS | QZSS | Galileo | Glonass) "GPS"> 
<! ELEMENT sat_meas_paraTns_gnss 

(sat_id, code_phase_ambiguity? , carr2_noise, doppler_mps? , code_phase_ms , integer_cod 

e_phase? , multi_path, psr_rms_err , adr? ) > 

<!ATTLIST sat_meas_params_gnss measured_signal (GPS_L1 | GPS_L1C | GPS_L2C | GPS 

_L5 I SBAS_L1 I GL0_G1 | GL0_G2 | GL0_G3 ) "GPS_L1 " > 

<!ELEMENT code_phase_ambiguity (#PCDATA) > <!-- 0..127 --> 
<!ELEMENT doppler_mps (#PCDATA) > <!-- m/s Range -32768 .. 32767 --> 
<!ELEMENT code_phase_ms (#PCDATA) > <!-- ms Range 0.. 2097151 --> 
<! ELEMENT integer_code_phase (#PCDATA) > 
<! ELEMENT adr (# PCDATA ) > 



NOTE 10:GNSS_meas is used for reporting measurements results for GNSS procedures i.e. procedures where: 
GNSS_allowed_methods, GNSS_assist was received or where acqu_assist uses units of ms. 

Table 8.55-12: XML DTD element <GPS_assist_req> 



<!ELEMENT GPS_assist_req {nav_addl_data? ) > 



<!ATTLIST GPS_assist_req 



aim req 


(true 


false) 


"false" 


UTC_model_req 


(true 


false) 


"false" 


ion_req 


(true 


false) 


"false" 


nav model req 


(true 


false) 


"false" 


DGPS corr req 


(true 


false) 


"false" 


ref_loc_req 


(true 


false) 


"false" 


ref time req 


(true 


false) 


"false" 


aqu_assist_req 


(true 


false) 


"false" 


rt integr req 


(true 


false) 


"false"> 



<! ELEMENT nav_addl_data (GPS_week, GPS_toe, ttoe_limit , addl_req_sat* ) > 
<! ELEMENT GPS_toe (#PCDATA) > 
<! ELEMENT ttoe_limit (# PCDATA ) > 
<! ELEMENT addl_req_sat (sat_id, iode) > 
<! ELEMENT iode {#PCDATA) > 



NOTE ll:For requesting assistance data, refer to 3GPPTS 25.331 [74] (subclause 10.3.7.88a) and 
3GPPTS 49.031 [80] (subclause 10.10). 

Table 8.55-13: XML DTD element for <insg> 



<! ELEMENT msg EMPTY> 

<!ATTLIST msg status (assist_data_delivered) #REQUIRED> 



NOTE 12: "assist_data_delivered" can be used as an indication of completion of provision of assistance 
data. 

Table 8.55-14: XML DTD element for <pos_err> 



<! ELEMENT pos_err (err_reason, GPS_assist_req? ) > 
<! ELEMENT err_reason_EMPTY> 

<!ATTLIST err_reason literal 
(undef ined_error | not_enough_gps_satellites | gps_assist_data_missing) #REQUIRED> 
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NOTE 13: For reporting positioning error, refer to 3GPPTS 25.331 [74] (subclause 10.3.7.87) and 
3GPPTS 44.031 L79] (subclause A.3.2.6). 

Table 8.55-15: XML DTD elements for GNSS Aid 



<! ELEMENT GNSS_assist 

(GNSS_ref_time, GNSS_ref_location, GNSS_ref_measurment_assist , GNSS_ionospheric_mod 
el , GNSS_earth_orient_param, GNSS_additional_ion_model , GNSS_time_model , GNSS_nav_mo 

del , GNSS_integrity , acqu_assist* ) > 
<!ATTLIST GNSS_assist 

gnss_id (SBAS | MGPS | QZSS | Glonass | GPS) #IMPLIED 
sbas_id (WASS j EGNOS | MSAS | GAGAN) #IMPLIED> 

<! ELEMENT GNSS_ref _time (GNSS_day, GNSS_TOD_s , notif ication_leap_sec) > 
<!ATTLIST GNSS_ref_time gnss_time_id (GPS | Glonass | QZSS) #REQUIRED> 
<! ELEMENT GNSS_day (ttPCDATA) > 

<! ELEMENT GNSS_TOD_s (#PCDATA) > <!-- seconds --> 

<!-- 0.. 86399 for RRLP; 0.000 to 86399.999 for LPP with ms --> 

<!-- TOD Uncertainty presented in TimeUnc --> 

<! ELEMENT notif ication_leap_sec {#PCDATA) > <!-- hex LPP only --> 
<!ELEMENT GNSS_ref_location {location_parameters) > 
<! ELEMENT GNSS_ref _measurment_assist (acqu_assist) > 
< ! ELEMENT GNSS_ionospheric_model 

(gnss_ion_aiO , gnss_ion_ail , gnss_ion_ai2 , gnss_ion_f lags? ) > 
<!ELEMENT gnss_ion_aiO (# PCDATA ) > <!-- range 0..4095 --> 
<! ELEMENT gnss_ion_ail (# PCDATA ) > <!-- range 0..4095 --> 
<!ELEMENT gnss_ion_ai2 (# PCDATA ) > <!-- range 0..4095 --> 
<! ELEMENT gnss_ion_f lags EMPTY> 
<!ATTLIST gnss_ion_f lags 



storm 


_f lagl 


(0 


1) 


"0" 


storm_ 


_f lag2 


(0 


1) 


"0" 


storm_ 


"flags 


(0 


1) 


"0" 


storm 


_f lag4 


(0 


1) 


"0" 


storm_ 


flags 


(0 


1) 


" " > 



< ! ELEMENT GNSS_earth_orient_param 

{gnss_eop_teop, gnss_eop_pmX, gnss_eop_pmX_d, gnss_eop_pmY, gnss_eop_pmY_d, gnss_eop_ 

deltaUTl , gnss_eop_deltaUTl_d) > 

<!ELEMENT gnss_eop_teop {# PCDATA ) > <!-- range 0.. 65535 --> 

<!ELEMENT gnss_eop_pmX (#PCDATA) > <!-- range -1048576 .. 1048575 --> 

<!ELEMENT gnss_eop_pmX_d (#PCDATA) > <!-- range - 163 84 .. 163 83 --> 

< 'ELEMENT gnss_eop_pmY (# PCDATA ) > <!-- range -1048576 .. 1048575 --> 

<!ELEMENT gnss_eop_pmY_d {#PCDATA) > <!-- range -16384 .. 16383 --> 

<!ELEMENT gnss_eop_deltaUTl (# PCDATA ) > <!-- range -1073741824 .. 1073741823 --> 

<!ELEMENT gnss_eop_deltaUTl_d (# PCDATA ) > <!-- range -262144 .. 262143 --> 

<!ELEMENT GNSS_additional_ion_model {ionospheric_model) > 
< ! ATTLIST GNSS_additional_ion_model 

ion_model_data_id {00|ll) "00"> <!-- from rrlp 11=QZSS 00=other --> 

<! ELEMENT GNSS_time_model (tme_ref _time , tme_A0 , tme_Al? , tme_A2? , tme_week? ) > 

<! ATTLIST GNSS_time_model gnss_time_id (GPS | Glonass | QZSS ) #REQUIRED> 

<! ELEMENT tme_ref_time (#PCDATA) > <!-- sec scale 2**4 --> 

<! ELEMENT tme_AO (#PCDATA) > <!-sec scale 2**-35 --> 

<! ELEMENT tme_Al (#PCDATA) > <!-- sec/ sec scale 2**-51 --> 

< 'ELEMENT tme_A2 {#PCDATA) > <!-- sec/sec sec scale 2**-68 --> 

<!ELEMENT tme_week (#PCDATA) > <!-- 0..8191 --> 

<! ELEMENT GNSS_nav_model (GNSS_satelite+) > 
<! ATTLIST GNSS nav model 
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non_broadcast_ind_f lag {0|l) "0"> 

<! ELEMENT GNSS_satelite {sat_id, nms_health, nms_iod, 

( (nms_clock_nav, nms_orbit_nav) | 
(nTns_clock_cnav, nms_orbit_cnav) | 
(nms_clock;_glonass , nms_orbit_glonass) | 
{nms_clock_sbas,nms_orbit_sbas) ) ) > 

<!ELEMENT nms_health {#PCDATA) > <!-- in hexadecimal --> 
<! ELEMENT nms_iod {#PCDATA) > <!-- includes iod_msb --> 

< 'ELEMENT GNSS_integrity {bad_signal* ) > 

<!ELEMENT bad_signal ( sat_id, GNSS_signal ? ) > 
<! ELEMENT signal (# PCDATA ) > <!-- hex --> 

<! ELEMENT GNSS_assist_req {GNSS_assist_req_per_gnss* ) > 
<!-- common assist req --> 
<! ELEMENT GNSS_ref _time_req EMPTY> 
<!ATTLIST GNSS_ref_time_req 

time_req_pref (SBAS | MGPS | QZSS | Glonass | GPS) #IMPLIED 

tow_req (false | true) "false" 

leap_sec_req (false] true) #IMPLIED> 
<! ELEMENT GNSS_ref _loc_req EMPTY> 
<! ELEMENT GNSS_ion_model_req EMPTY> 
<! ELEMENT GNSS_earth_orient_req EMPTY> 

<!-- generic req --> 
< 'ELEMENT GNSS_assist_req_per_gnss 
{GNSS_time_model_req? , GNSS_navigation_model_req? ) > 
<!ATTLIST GNSS_assist_req_per_gnss 

gnss_id (SBAS | MGPS | QZSS | Glonass | GPS) #REQUIRED 
sbas_id (WASS j EGNOS | MSAS | GAGAN) #IMPLIED> 
<! ELEMENT GNSS_time_model_req EMPTY> 

<!-- For LPP gnss -TO- IDsReq is derived from gnss_id --> 

<!ATTLIST GNSS_time_model_req delta_T_req (false | true) #IMPLIED> 
< ! ELEMENT GNSS_navigation_model_req {stored_nav_list? , request ed_nav_l i st ? ) 

> 

< 'ELEMENT stored_nav_list 
{snl_week_or_day, snl_toe, snl_toe_limit , stored_sat_list_element* , requested_nav_li 

St?) > 

<! ELEMENT snl_week_or_day (#PCDATA) > 
<! ELEMENT snl_toe (# PCDATA ) > 
<! ELEMENT snl_toe_limit (#PCDATA) > 
<! ELEMENT stored_sat_list_element EMPTY> 
< ! ATTLIST stored_sat_list_element 
stored_id CDATA #REQUIRED 
stored_iod CDATA #REQUIRED 
stored_clock_model (2|3|4|5) #IMPLIED 
stored_orbit_model (2|3|4|5) #IMPLIED> 
< 'ELEMENT requested_nav_list (wanted_nav_list_inf o*) > 
<! ELEMENT wanted_nav_list_inf o EMPTY> 
<! ATTLIST wanted_nav_list_inf o 
wanted_sv CDATA " OOOOOOOOf f f f f f f f " 
wanted_clock_model (2 | 3 | 4 | 5) #IMPLIED 
wanted_orbit_model (2 | 3 | 4 | 5) #IMPLIED 
wanted_add_nav_param (false | true) #IMPLIED> 
<!-- wanted_sv is a bit string in hexidecimal, needed for LPP --> 
<! ELEMENT GNSS_integrity_req EMPTY> 
<!ELEMENT GNSS_acquisition_req EMPTY> 
< 'ATTLIST GNSS_acquisition_req signal 
(GPS LI I GPS Lie I GPS L2C|GPS L5 | SBAS LllGLO Gl I GLO G2 I GLO G3) "GPS Ll"> 
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NOTE 14: GNSS_assist is used for assistance data received via an RRLP ASN.l GANSSAssistanceSet element 
(refer to 3GPP TS 44.031 [79]), via an RRC GANSS assistance data element (refer to 
3GPP TS 25.331 [74] subclause 10.3.7.90b) or via LPP. 

Table 8.55-16: XML DTD elements for GNSS GPS 



< ! ELEMENT nms_clock_nav (nav_Toc , nav_af 2 , nav_af 1 , nav_af , nav_Tgd) > 



< ! ELEMENT nav_Toc 
<! ELEMENT nav_af2 
<! ELEMENT nav_afl 
< ! ELEMENT nav_af 
< ! ELEMENT nav_Tgd 



(#PCDATA)> <!-- 0.. 37799 --> 

(#PCDATA)> <!-- -12 8. .12 7 --> 

(# PCDATA ) > <!-- -32768 .. 32767 --> 

(#PCDATA)> <!-- -2097152 . .2097151 

(#PCDATA)> <!-- -128.. 127 --> 



< ! ELEMENT nms_orbit_nav 

(nav_URA, nav_FitFlag, nav_Toe , nav_Omega, nav_DeltaN, nav_MO , nav_OmegaA_d , nav_E , nav_ 
I_d, nav_APowerHalf , nav_IO , nav_OmegaA0 , nav_Crs , nav_Cis , nav_Cus , nav_Crc , nav_Cic , na 
v_Cuc , (nav_CodeOnL2 , nav_L2Pf lag, nav_sf 1_1 , nav_sf 1_2 , nav_sf 1_3 , nav_sf 1_4 , nav_AODA 

) ?) > 



< 


ELEMENT 


nav 


URA (#PCDATA)> <! 






0. .15 --> 




< 


ELEMENT 


nav 


FitFlag (# PCDATA ) > 




< 


! -- 0. . 1 --> 




< 


ELEMENT 


nav 


_Toe (#PCDATA)> <! 






. .37799 --> 




< 


ELEMENT 


nav 


Omega (# PCDATA) > 


< ! 




- -2147483648 . . 


2147483647 --> 


< 


ELEMENT 


nav 


_DeltaN (#PCDATA) > 


< ! 


-- -32768 . . 32767 --> 


< 


ELEMENT 


nav 


MO (#PCDATA)> <!- 






2147483648 .. 2147483647 --> 


< 


ELEMENT 


nav 


_OmegaA_d (#PCDATA) 


> 




< ! -- -8388608 . . 


8388607 --> 


< 


ELEMENT 


nav 


_E (# PCDATA ) > <!-- 







. .4294967295 -- 


> 


< 


ELEMENT 


nav 


I d (#PCDATA) > < ! 






-8192 . . 8191 --> 




< 


ELEMENT 


nav 


APowerHalf (# PCDATA) 


> 


< ! -- . .4294967295 --> 


< 


ELEMENT 


nav 


_I0 (#PCDATA)> <!- 






2147483648 .. 2147483647 --> 


< 


ELEMENT 


nav 


_OmegaA0 (#PCDATA) > 




<!-- -2147483648 


. .2147483647 - 


< 


ELEMENT 


nav 


_Crs (#PCDATA) > <! 






-32768. .32767 - 


- > 


< 


ELEMENT 


nav 


_Cis (#PCDATA) > <! 






-32768 . . 32767 - 


- > 


< 


ELEMENT 


nav 


Cus (# PCDATA ) > <! 






-32768 . .32767 - 


- > 


< 


ELEMENT 


nav 


_Crc (# PCDATA ) > <! 






-32768 . . 32767 - 


- > 


< 


ELEMENT 


nav 


"Cic (#PCDATA)> <! 






-32768 . . 32767 - 


- > 


< 


ELEMENT 


nav 


_Cuc (#PCDATA)> <! 






-32768 . .32767 - 


- > 


< 


ELEMENT 


nav 


_CodeOnL2 (#PCDATA) 


> 




<!-- 0..3 --> 




< 


ELEMENT 


nav 


_L2Pf lag (#PCDATA) > 




<!-- 0..1 --> 




< 


ELEMENT 


nav 


_sfl_l (#PCDATA)> 


< ! 




- 0. .8388607 - 


- > 


< 


ELEMENT 


nav 


[sf 1_2 (#PCDATA) > 


< ! 




- . . 16777215 


- - > 


< 


ELEMENT 


nav 


_sfl_3 (# PCDATA )> 


< ! 




- . . 16777215 


- - > 


< 


ELEMENT 


nav 


_sf 1 4 (#PCDATA) > 


< ! 




- . . 65535 --> 




< 


ELEMENT 


nav 


AODA {#PCDATA)> <!- 




0. .31 --> 





<! ELEMENT nms_clock_cnav 

( cnav_Toc , cnav_Top , cnav_URAO , cnav_URAl , cnav_URA2 , cnav_Af 2 , cnav_Af 1 , cnav_Af , cnav 
_Tgd, cnav_ISCllcp? , cnav_ISCllcd? , cnav_ISCllca? , cnav_ISC12c? , cnav_ISC15i5? , cnav_I 

SC15q5?) > 



< 


ELEMENT 


cnav 


_Toc (#PCDATA)> <!- 


- 


. .2015 - 


- > 




< 


ELEMENT 


cnav 


_Top (#PCDATA)> <!- 


- 


. .2015 - 


- > 




< 


ELEMENT 


cnav 


_URAO (#PCDATA)> <! 




-16. .15 


- - > 




< 


ELEMENT 


cnav 


_URA1 (# PCDATA )> <! 




. . 7 --> 






< 


ELEMENT 


cnav 


_URA2 (# PCDATA ) > <! 




. . 7 --> 






< 


ELEMENT 


cnav 


_Af2 (#PCDATA)> <!- 




512 . . 511 


- - > 




< 


ELEMENT 


cnav 


Afl (# PCDATA ) > <!- 




524288 . . 


524287 


- - > 


< 


ELEMENT 


cnav 


AfO (# PCDATA ) > <!- 




33554432 


. . 33554431 


< 


ELEMENT 


cnav 


_Tgd (# PCDATA ) > <!- 




4096 . .4095 --> 




< 


ELEMENT 


cnav 


_ISCllcp (#PCDATA) > 


< ! 


-- -4096 


. .4095 


- - > 


< 


ELEMENT 


cnav 


ISCllcd (#PCDATA) > 


< ! 


-- -4096 


. .4095 


- - > 


< 


ELEMENT 


cnav 


ISCllca (#PCDATA) > 


< ! 


-- -4096 


. .4095 


- - > 


< 


ELEMENT 


cnav 


_ISC12c (#PCDATA) > 


< ! - 


- -4096. 


.4095 - 


- > 


< 


ELEMENT 


cnav 


_ISC15i5 (#PCDATA) > 


< ! 


-- -4096 


. .4095 


- - > 


< 


ELEMENT 


cnav 


_ISC15q5 (ttPCDATA) > 


< ! 


-- -4096 


. .4095 


- - > 
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< ! ELEMENT nms_orbit_cnav 

{cnav_Top, cnav_URAindex, cnav_DeltaA, cnav_Adot , cnav_DeltaNo, cnav_DeltaNoDot , cnav_ 
Mo, cnav_E , cnav_Omega, cnav_OMEGA0 , cnav_DeltaOmegaDot , cnav_Io, cnav_IoDot , cnav_Cis , 
cnav_Cic, cnav_Crs, cnav_Crc, cnav_Cus, cnav_Cuc) > 



< 


JZj J-lJUjluIljiNI J. 


cnav 


_URAindex (#PCDATA) > 


<!-- -16. .15 --> 


< 


T?T.T?MT?"NTT 


cnav 


_DeltaA {#PCDATA) 


> < ! 


-- -33554432 .. 33554431 --> 




T?TiT?MT?l\rT 

.Ci J-I.Cii'l.CilN J. 


cnav 


Adot {#PCDATA) > 


< ! -- 


-16777216 .. 16777215 --> 




JZj J_|JZj1*1JZj±M J. 


cnav 


_DeltaNo (# PCDATA) > < 


! -- -65536 . . 65535 --> 


< 


T?T.T?MT7TvTT 

Hj J-IHjI'ICjIn J. 


cnav 


DeltaNoDot {#PCDATA) > 


<!-- -4194304 . .4194303 --> 


< 


T?T.T?MT?"MT 


cnav 


Mo 


{#PCDATA)> <!-- - 


4294967296. .4294967295 --> 


< 


T?T T?MT?"NT'T 
Jzj J-iJzjrlJzjrJ 1 


cnav 


_E (# PCDATA ) > <! 


-- . 


.8589934591 --> 


< 


ELEMENT 


cnav 


_Omega (# PCDATA) > 


< ! - 


- -4294967296 . .4294967295 -- 


< 


ELEMENT 


cnav 


_OMEGA0 (# PCDATA) 


> < ! 


-- -4294967296 . .4294967295 - 


< 


ELEMENT 


cnav 


_DeltaOmegaDot {# PCDATA) > <!-- -65536 .. 65535 --> 


< 


ELEMENT 


cnav 


lo 


{#PCDATA)> <!-- - 


4294967296. .4294967295 --> 


< 


ELEMENT 


cnav 


loDot (#PCDATA)> 


< ! - 


- -16384 . . 16383 --> 


< 


ELEMENT 


cnav 


_Cis 


{# PCDATA) > 


< ! -- 


-32768 . . 32767 --> 


< 


ELEMENT 


cnav 


_Cic 


(ttPCDATA) > 


< ! -- 


-32768 . . 32767 --> 


< 


ELEMENT 


cnav 


Crs 


(# PCDATA) > 


< ! -- 


-8388608 . . 8388607 --> 


< 


ELEMENT 


cnav 


_Crc 


(# PCDATA) > 


< ! -- 


-8388608 . . 8388607 --> 


< 


ELEMENT 


cnav 


_Cus 


(ttPCDATA) > 


< ! -- 


-1048576 .. 1048575 --> 


< 


ELEMENT 


cnav 


Cue 


{#PCDATA) > 


< ! -- 


-1048576 .. 1048575 --> 



Table 8.55-17: XML DTD elements for Glonass 



<! ELEMENT nTns_orbit_glonass 

{glo_En, glo_Pl , glo_P2 , glo_M, glo_X, glo_X_d, glo_X_dd, glo_Y, glo_Y_d, glo_Y_dd, glo_Z 



d, glo_Z_dd) > 


















< . 


ELEMENT 


glo_ 


_En (#PCDATA)> 


< ! -- 


. . 31 




> 






< , 


ELEMENT 


glo_ 


_P1 (# PCDATA) > 


< ! -- 


hex - - 


> 








< '. 


ELEMENT 


glo_ 


_P2 (ttPCDATA) > 


< ! -- 


0. .1 


- - > 








< '. 


ELEMENT 


glo_ 


_M (ttPCDATA) > 


< ! -- 


0. .3 - 


- > 








< . 


ELEMENT 


glo_ 


_X {#PCDATA) > 


< ! -- 


-671088 


64 . 


. 6710! 


3863 


- - > 


< . 


ELEMENT 


glo_ 


_X_d (# PCDATA) > 


< ! - 


- -8388 


608 


. . 838i 


3607 


- - > 


< . 


ELEMENT 


glo_ 


_X_dd {# PCDATA) 


> < ! 


-- -16. 


. 15 


- - > 






< '. 


ELEMENT 


glo_ 


_Y (ttPCDATA) > 


< ! -- 


-671088 


64 . 


.6710! 


3863 


- - > 


< 


ELEMENT 


glo_ 


_Y_d (# PCDATA )> 


< ! - 


- -8388 


608 


. .838! 


3607 


- - > 


< . 


ELEMENT 


glo_ 


_Y_dd {# PCDATA) 


> < ! 


-- -16. 


. 15 


- - > 






< '. 


ELEMENT 


glo_ 


_Z (ttPCDATA) > 


< ! -- 


-671088 


64 . 


.6710! 


3863 


- - > 


< . 


ELEMENT 


glo 


_Z_d (# PCDATA) > 


< ! - 


- -8388 


608 


. .838! 


3607 


- - > 


< . 


ELEMENT 


glo 


_Z_dd (# PCDATA) 


> < ! 


-- -16. 


. 15 


- - > 







<!ELEMENT nms_clock_glonass {glo_Tau, glo_Gamma, glo_DeltaTau) > 
<! ELEMENT glo_Tau {#PCDATA) > <!-- -2097152 .. 2097151 --> 
<! ELEMENT glo_Gamma (# PCDATA ) > <!-- -1024. .1023 --> 
<! ELEMENT glo_DeltaTau {# PCDATA ) > <!-- -16. .15 --> 



Table 8.55-18: XML DTD elements for SBAS 



< 'ELEMENT nms_clock_sbas (sbas_To, sbas_Agf o, sbas_Agf 1) > <!-- model 4 --> 
<! ELEMENT sbas_To (#PCDATA) > 
<!ELEMENT sbas_Agfo (#PCDATA) > 
<! ELEMENT sbas_Agfl {#PCDATA) > 

<! ELEMENT nms_orbit_sbas 

(sbas_To, sbas_accuracy, sbas_Xg, sbas_Yg, sbas_Zg, sbas_Xg_d, sbas_Yg_d, sbas_Zg_d, sba 
s_Xg_dd, sbas_Yg_dd, sbas_Zg_dd) > < ! - - model 4 - - > 

<! ELEMENT sbas_accuracy (#PCDATA) > <!-- hex --> 

<! ELEMENT sbas_Xg (# PCDATA ) > 
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< 


ELEMENT 


sbas_ 


Yg 


(# PCDATA) > 


< 


ELEMENT 


sbas_ 


Zg 


{# PCDATA) > 


< ! ELEMENT 


sbas_ 


Xg 


_d (#PCDATA) > 


< 


ELEMENT 


sbas 


Yg 


_d (# PCDATA) > 


< 


ELEMENT 


sbas 


Zg 


_d (#PCDATA)> 


< 


ELEMENT 


sbas 


Xg 


_dd (# PCDATA )> 



<! ELEMENT sbas_Yg_dd {#PCDATA) > 
<! ELEMENT sbas_Zg_dd {#PCDATA) > 



Table 8.55-19: XML DTD elements for GNSS Provided Location Information 



< 'ELEMENT GNSS_provided_location_inf ormation {GNSS_meas , location_parameters ) > 
< 'ELEMENT pi i_TOD_ms {#PCDATA) > 

<!-- pli_TOD_ms is time of day in ms in decimal to 5 decimal places. 
Format #######.##### --> 

<!ATTLIST pli_TOD_ms gnss_time_id (GPS | Glonass | QZSS) "GPS"> 



NOTE 15:GNSS_provide_location_information is used for reporting location information for GNSS procedures i.e. 

procedures where GNSS_allowed_methods or GNSS_assist is received. This element matches the ASN.l 
element GANSSLocationlnfo for RRLP procedures; UE positioning measured results information 
element for RRC or ASN.l A-GNSS-ProvideLocationInf ormation for LPP. 

Implementation 

Optional. 

8.56 Positioning Reporting +CPOSR 



Table 8.56-1 : +CPOSR parameter command syntax 



Command 


Possible response(s) 


+CPOSR= [<mode>] 




+CPOSR? 


+CPOSR: <mode> 


+CPOSR=? 


+CPOSR : (Ust of supported <mode>s) 



Description 

Set command enables or disables the sending of unsolicited result codes. The XML-formatted string may be sent as one 
or more unsolicited result codes. Each part of the XML-formatted string is sent as one unsolicited result code, prefixed 
with +CPOSR. 

NOTE: An XML -formatted string intended for +CPOSR can be split e.g. in order to prevent that the string 

becomes too long. Where to split an XML-formatted string is implementation specific. The characters 
<CR><LF>, <+CPOSR> and space(s) are ignored when re-constructing an XML-formatted string. 

Example: +CPOSR: <One line of positioning data sent on XML format>. 
Read command returns the current mode. 
Test command returns the supported values and ranges. 
Defined values 

<mode>: integer type 

disables reporting 

1 enables reporting 
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Defined events 

<location>: string type in UTF-8. This parameter provides an XML-formatted string of GAD-shape positioning 
data similar to what is defined in table 8.55-3. This parameter shall not be subject to conventional character 
conversion as per +CSCS. 

<assist_data>; string type in UTF-8. This parameter provides an XML-formatted string of assistance data as 
defined in table 8.55-5. This parameter shall not be subject to conventional character conversion as per +CSCS. 

<pos_meas>: string type in UTF-8. This parameter provides an XML-formatted string of position measurements 
data request as defined in table 8.55-8. This parameter shall not be subject to conventional character conversion 
as per +CSCS. 

<pos_Tneas_req>: string type in UTF-8. This parameter provides an XML-formatted string of position 

measurements request data as defined in table 8.55-9. This is an alternative to <pos_meas>. This parameter shall 
not be subject to conventional character conversion as per +CSCS. 

<GPS_meas >: string type in UTF-8. This parameter provides an XML-formatted string of GPS measurement data 
as defined in table 8.55-6-10. This parameter shall not be subject to conventional character conversion as per 
+CSCS. 

<GNSS_meas>: string type in UTF-8. This parameter provides an XML-formatted string of GPS measurement data 
as defined in table 8.55-1 1 for LPP procedures. This parameter shall not be subject to conventional character 
conversion as per +CSCS.<GPS_assist_req>: string type in UTF-8. This parameter provides an XML- 
formatted string for requesting assistance data as defined in table 8.55-12. This parameter shall not be subject to 
conventional character conversion as per +CSCS. 

<GNSS_assist_req>: string type in UTF-8. This parameter provides an XML-formatted string for requesting 
GNSS assistance data as defined in table 8.55-15. This parameter shall not be subject to conventional character 
conversion as per +CSCS. 

<capability_req> string type in UTF-8. This parameter provides an XML-formatted string for requesting 
capability data as defined in table 8.55-4. This parameter shall not be subject to conventional character 

conversion as per +CSCS. 

<capabilities> string type in UTF-8. This parameter provides an XML-formatted string for providing 
capability data as defined in table 8.55-4. This parameter shall not be subject to conventional character 
conversion as per +CSCS. 

<msg>: string type in UTF-8. This parameter provides an XML-formatted string for communicating simple 

messages as defined in table 8.55-13. This parameter shall not be subject to conventional character conversion as 
per +CSCS. 

<pos_err>: string type in UTF-8. This parameter provides an XML-formatted string of positioning error 

parameters as defined in table 8.55-14. This parameter shall not be subject to conventional character conversion 
as per +CSCS. 

Implementation 

Optional. 

8.57 Mobile Terminated Location Request notification +CI\/ITLR 



Table 8.57-1 : +CMTLR parameter command syntax 



Command 


Possible response(s) 


+CMTLR=<subscribe> 




+CMTLR? 


+CiyiTLR: <subscribe> 


+CMTLR=? 


+CMTLR : (list of supported <subscribe> values) 



Description 
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Set command enables Mobile Terminated Location Request (MT-LR) notifications to the TE. The parameter 
<subscribe> enables or disables notification by an unsolicited result code. It is possible to enable notification of 
MT-LR performed over the control plane or over SUPL or both. Relevant location request parameters are provided in 

the unsolicited result code +CMTLR : <handle- id> , <not if icat ion- type> , <location- 
type>, [<client-external-id>] , [<client-name>] [,<plane>]. 

This unsolicited result code is reported upon arrival of a Mobile Terminated Location Request. In order to differentiate 
multiple requests, every request is given a different <handle- id>. This ID is used when allowing or denying location 
disclosure with +CMTLRA. 

Read command returns the current value of < subscribe >. 
Test command returns the supported alues. 
Defined values 

< subscribe >: integer type. Enables and disables the subscription for MT-LR notifications 

Disables reporting and positioning. 

1 Subscribe for notifications of MT-LR over control plane. 

2 Subscribe for notifications of MT-LR over SUPL. 

3 Subscribe for notifications of MT-LR over control plane and SUPL. 

<handle- id>: integer type. ID associated with each MT-LR used to distinguish specific request in case of 
multiple requests. The value range is 0-255. 

<notif ication-type>: integer type. Information about the user's privacy. The default value is implementation 
specific. 

The subscription may stipulate that positioning the user by a third party is allowed and the network may 
choose to inform the user as a matter of courtesy. 

1 Locating the user is permitted if the user ignores the notification. 

2 Locating the user is forbidden if the user ignores the notification. 

<location-type>: integer type. Indicates what type of the location is requested. The default value is 
implementation specific. 

The current location. 

1 The current or last known location. 

2 The initial location. 

< client- external -id>: string type. Indicates the external client where the location information is sent to (if 
required). 

<client-name>: string type. Contains the string identifying the external client requesting the user's location 
<plane>: integer type. The parameter specifies whether the MT-LR came over control plane or SUPL. 

Control plane. 

1 Secure user plane (SUPL). 
Implementation 

Optional. 
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8.58 Mobile Terminated Location Request disclosure Allowance 
+CI\/ITLRA 



Table 8.58-1 : +CMTLRA parameter command syntax 



Command 


Possible response(s) 


+CMTLRA=<allow>, <handle id> 




+CMTLRA? 


+CMTLRA: <allow> , <handle id> 


+CMTLRA=? 


+CMTLRA : (list of supported <allow> values) 



Description 

Set command allows or disallows disclosure of the location to the TE as a result of MT-LR by the parameter <allow>. 
Read command returns the current value. 
Test command returns the supported values. 
Defined values 

<allow>: integer type. Enables and disables the allowance for location disclosure. 

Location disclosure allowed. 

1 Location disclosure not allowed. 

<handle- id>: integer type. ID associated with each MT-LR used to distinguish specific request in case of 
multiple requests. The value is given in +CMTLR. The value range is 0-255. 

Implementation 

Optional. 

8.59 Battery Capacity +CBCAP 



Table 8.59-1 : CBCAP parameter command syntax 



Command 


Possible response(s) 


+CBCAP= [<reporting> [ , <reporting 
interval>] ] 




+ CBCAP? 


+CBCAP: <reporting> , <reporting interval >, <bcl> 


+CBCAP=? 


+CBCAP : (hst of supported <reporting>s) , (list of supported 
<reporting interval >s) 



Description 

Set command enables reporting upon change in battery capacity level, with unsolicited result code +CBCAP : <bcl >. 
Consecutive reports never show same value of <bcl >. 

Read conmiand returns the status of result code presentation and the current battery capacity level. 
Test command returns values supported as compound values. 
Defined values 

<reporting>: integer type. Enables and disables reporting of changes in the battery capacity level. 

Disable reporting 

1 Enable reporting 
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<reporting_interval>: integer type. Sets the reporting interval of the battery capacity level. 

1 ... 1 00 Amount that the remaining battery capacity must change before reporting) . 

<bcl>: integer type. Gives the remaining relative battery capacity level (in percentages). 

The battery is exhausted or ME does not have a battery connected 

1 ... 100 remaining battery capacity level (in percentages). The provided values are dependant on the 
parameter <reporting_interval>. A value of 5 for parameter <reporting_interval>, means 
that the following values of <bcl> are appUccable: 0, 5, 10, 15, ... , 90, 95, 100. 

NOTE: 100% capacity is always reported, even if <report ing_interval > is set to a value where no integer 
multiple equals 100. 

Implementation 

Optional. 

8.60 Battery Connection Status +CBCON 



Table 8.60-1 : +CBCON parameter command syntax 



Command 


Possible response(s) 


+CBCON= [<reporting>] 




+CBCON? 


+CBCON: <reporting> , <bcs> 


+CBCON=? 


+CBCON : (list of supported <reporting>s) 



Description 

Set command enables reporting upon change in battery connection status, with unsolicited result code 
+CBCON: <bcs>. 

Read command returns the status of result code presentation and the current battery status. 
Test command returns values supported as compound values. 
Defined values 

<reporting>: integer type. Enables and disables reporting of changes in the battery connection status. 

disable reporting 

1 enable reporting 

<bcs>: integer type. Indicates the battery status. 

ME is powered by the battery 

1 ME has a battery connected, but is not powered by it 

2 ME does not have a battery connected 

3 Recognized power fault, calls inhibited 
Implementation 

Optional. 
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8.61 Battery Charger Status +CBCHG 



Table 8.61-1: +CBCHG parameter command syntax 



Command 


Possible response(s) 


+CBCHG= [<reporting>] 




+CBCHG? 


+CBCHG: <reporting>, <chg_status> 


+CBCHG=? 


+CBCHG : {list of supported <reporting>s) 



Description 

Set command enables reporting upon change in battery charger status, with unsohcited result code 

+CBCHG: <chg_status>. 

Read command returns the status of result code presentation and the current battery charger status. 
Test command returns values supported as compound values. 
Defined values 

<reporting>: integer type. Enables and disables reporting of changes in the battery charger status. 

disable reporting 

1 enable reporting 

<chg_status>: integer type. Indicates type of battery charger status. 

no charger cormected 

1 charger cormected, normal type charger 

2 charger cormected, USB type charger 
Implementation 

Optional. 

8.62 Printing IP Address Format +CGPIAF 



Table 8.62-1 : +CGPiAF parameter command syntax 



Command 


Possible response(s) 


+CGPIAF= [<IPv6 AddressFormat> [ , < 

IPv6 SubnetNotation> [ , <IPv6 Lead 
ingZeros> [ , <IPv6 CompressZeros>] 
] ] ] 




+CGPIAF? 


+CGPIAF: <IPv6 AddressFormat> , <IPv6 SubnetNotation 
> , <IPv6_LeadingZeros> , <IPv6_CompressZeros> 


+CGPIAF=? 


+CGPIAF : (hst of supported <IPv6_AddressFormat>s) , (list of 
supported <IPv6_SubnetNotation>s) , (hst of supported 
<IPv6_LeadingZeros>s) , (list of supported 
<IPv6_ConipressZeros>s) 



Description 

Set command decides what format to print IPV6 address parameters of other AT commands. See RFC 4291 [88] for 
details of the IPv6 address format. 

The +CGPIAF parameters <IPv6_AddressFormat>, <IPv6_SubnetNotation>, <IPv6_LeadingZeros> 
and <IPv6_CoinpressedZeros> affect the following commands and parameters: 
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a) in +CGTFT and +CGTFTRDP, the < source address and subnet mask>; 

b) in +CGDCONT, the <PDP_addr>; 

c) in +CGPADDR, the <PDP_addr_l> and <PDP_addr_2 >; 

d) in +CGCONTRDP, the < source address and subnet mask;>, <DNS_prim_addr>, 
<DNS_sec_addr>, <P_CSCF_priin_addr> and <P_CSCF_sec_addr>; and 

e) in +CRC, the <PDP_addr> of unsoUcited result code GPRS <PDP_type>, <PDP_addr>[, 

[<L2P>] [, <APN>] ] . 

Read command returns the current command parameter settings. 
Test command returns values supported as compound values. 
Defined values 

<IPv6_AddressFormat>: integer type, decides the IPv6 address format. Relevant for all AT command 
parameters that can hold an IPv6 address. 

Use IPv4-like dot-notation. IP address, and subnetwork mask if appliccable, are dot-separated. 

Example: For<source address and subnet mask>: 

"32.1.13.184.0.0.205.48.0.0.0.0.0.0.0.0.255.255.255.255.255.255.255.240.0.0.0.0.0.0.0.0" 

For other IP address parameters: 

"32. 1 . 13. 184.0.0.205.48.0.0.0.0.0.0.0.0" 

1 Use IPv6-like colon-notation. IP address, and subnetwork mask if applicable and when given exphcitly, are 
separated by a space. 

Example: For <source address and subnet mask>: 

"2001:0DB8:0000:CD30:0000:0000:0000:0000FFFF:FFFF:FFFF:FFF0:0000:0000:0000:0000" 

For other IP address parameters: 

"2001:0DB8:0000:CD30:0000:0000:0000:0000" 

< I Pv6_SubnetNotation>: integer type, decides the subnet-notation for < source address and subnet 
mask. Setting does not apply if < I Pv6_Address Format > = 0. 

Both IP Address and subnet mask are stated explicitly, separated by a space. 

Example: "2001:0DB8:0000:CD30:0000:0000:0000:0000 FFFF:FFFF:FFFF:FFFO:0000:0000:0000:0000" 

1 The printout format is applying / (forward slash) subnet-prefix Classless Inter-Domain Routing (CIDR) 
notation. 

Example: "2001:0DB8:0000:CD30:0000:0000:0000:0000/60" 

<IPv6_LeadingZeros>: integer type, decides whether leading zeros are omitted or not. Setting does not 
apply if <IPv6_AddressFormat> = 0. 

Leading zeros are omitted. 
Example: "2001:DB8:0:CD30:0:0:0:0" 

1 Leading zeros are included. 

Example: " 200 1 : ODB 8 : 0000 :CD3 0:0000: 0000: 0000: 0000" 

<IPv6_CompressZeros>: integer type, decides whether 1-n instances of 16-bit zero-values are replaced by only 
'::'. This apphes only once. Setting does not apply if <IPv6_AddressFormat> = 0. 

No zero compression. 

Example: "2001:DB8:0:CD30:0:0:0:0" 
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1 Use zero compression. 
Example: "2001:DB8:0:CD30::" 
Implementation 
Optional. 

8.63 IMS Single Radio Voice Call Continuity +CISRVCC 



Table 8.63-1 : +CISRVCC parameter command syntax 



Command 


Possible response(s) 


+CISRVCC= [<uesrvcc>] 


+CME ERROR: <err> 


+CISRVCC? 


+CISRVCC: <uesrvcc> 


+CISRVCC=? 


+CISRVCC : (list of supported <uesrvcc>s) 



Description 

SRVCC provides the ability to have a seamless handover of a voice call between the PS domain and the CS domain for 
calls that are anchored in IMS, when the UE is capable of transmitting/receiving on only one of those access networks 
(PS or CS) at a given time, see 3GPP TS 23.221 [90] subclause 7.2a, annex A.l and annex A.2 

Set command informs MT about the SRVCC Support. MT normally updates the network when changing this parameter. 
Refer subclause 9.2 for possible <err> values. 

Read command returns the status of the MT stored SRVCC Support. 

Test command returns supported values. 

Defined values 

<uesrvcc>: integer type. SRVCC support status 

The UE does not have SRVCC support 

1 The UE has SRVCC support 
Implementation 

Optional. 

8.64 IMS network reporting +CIREP 



Table 8.64-1: +CIREP parameter command syntax 



Command 


Possible response(s) 


+CIREP= [<reporting>] 




+CIREP? 


+CIREP: <reporting> , <nwimsvops> 


+CIREP=? 


+CIREP : (hst of supported <reporting>s) 



Description 

Set command enables or disables reporting of SRVCC handoverinformation (see 3GPP TS 24.237 [91]) and of IMS 
Voice Over PS sessions (IMSVOPS) indicator information, by the following unsolicited result codes: 

+CIREPI : <nwimsvops> IMS Voice Over PS sessions (IMSVOPS) supported indication from the network. 

+CIREPH : <srvcch> Provides Single Radio Voice Call Continuity (SRVCC) handover information. 

Read conmiand returns the status of result code presentation and the IMSVOPS supported indication. 
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Test command returns supported values. 
Defined values 

<reporting>: integer type. Enables or disables reporting of changes in the IMSVOPS supported indication 
received from the network and reporting of SRVCC handover information. 

Disable reporting 

1 Enable reporting 

<nwimsvops>: integer type. Gives the last IMS Voice Over PS sessions (IMSVOPS) supported indication 
received from network. 

IMSVOPS support indication is not received from network, or is negative. 

1 IMSVOPS support indication as received from network is positive. 
<srvcch>: integer type. SRVCC handover information. 

PS to CS SRVCC handover has started in the CS domain ("Handover Command" indicating SRVCC 
received). 

1 PS to CS SRVCC handover successful ("Handover Complete" sent). 

2 PS to CS SRVCC handover cancelled ("Handover Failure" sent). 

3 PS to CS SRVCC handover, general non specific failure. 
Implementation 

Optional. 

8.65 Remaining PIN Retries +CPINR 



Table 8.65-1 : +CPINR action command syntax 



Command 


Possible response(s) 


+CPINR [=<sel_code>] 


+CME ERROR: <err> 


+CPINR=? 





Description 

Execution conmiand cause the MT to return the number of remaining PIN retries for the MT passwords with 
intermediate result code +CPINR: <code>, <retries> [ , <def ault_retries>] for standard PINs and 
+CPINRE : <ext_code> , < retries > [, <def ault_retries>] for manufacturer specific PINs. One hne with 
one intermediate result code is returned for every <code> or <ext_code> selected by <sel_code>. 

When execution command is issued without the optional parameter <sel_code>, intermediate result codes are 
returned for all <code>s and <ext_code>s. 

In the intermediate result codes, the parameter <def ault_retries> is an optional (manufacturer specific) 

parameter, per <code> and <ext_code>. 

Defined values 

<retries>: integer type. Number of remaining retries per PIN. 

<def ault_retries>: integer type. Number of default/initial retries per PIN. 

<code>: Type of PIN. All values hsted under the description of the AT+CPIN command, <code> parameter, 
except 'READY'. 
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<ext_code>: Extended, manufacturer specific codes. 

<sel_code>: String type. Same values as for the <cod.e> and <ext_code> parameters. These values are 
strings and shall be indicated within double quotes. It is optional to support wildcard match by '*', meaning 
match any (sub-)string. 



Example: 



Example: 



Implementation 

Optional. 



AT+CPINR="SIM* " will return the lines: 
+CPINR: SIM PIN, <retries> , <def ault_retries> 
+CPINR: SIM PUK, <retries> , <def ault_retries> 
+CPINR: SIM PIN2, <retries>, <default_retries> 
+CPINR: SIM PUK2 , <retries> , <def ault_retries> 
AT+CPINR= " *SIM* " will additionally return the lines: 
+CPINR: PH-SIM PIN, <retries> , <def ault_retries> 
+CPINR: PH-FSIM PIN, <retries> , <def ault_retries> 
+CPINR: PH-FSIM PUK, <retries> , <def ault retries> 



8.66 Set Card Slot +CSUS 

Table 8.66-1 : +CSUS parameter command syntax 



Command 


Possible response(s) 


+CSUS=<card slot> 


+CME ERROR: <err> 


+CSUS? 


+CSUS: <card slot> 


+CSUS=? 


+CSUS : (number of supported < card slot>s) 



Description 

When a MT is equipped with multiple card slots, the set command directs the MT to select the SIM/USIM card installed 
in the indicated card slot in all future actions that require the use of SIM/USIM. 

If this command is issued when a SIM is active or a USIM appUcation is active, +CME ERROR is returned. Refer to 
subclause 9.2 for <err> values. 

Read command returns the currently selected card slot. 

Test command returns the number of card slots in the MT. 

The numbering of card slots is implementation dependent. 

Defined values 

<card slot >: integer type. 

the SIM/USIM card installed in card slot 

1 the SIM/USIM card installed in card slot 1 

2 the SIM/USIM card installed in card slot 2 

3 the SIM/USIM card installed in card slot 3 
Implementation 
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Optional. 

8.67 Emergency Numbers +CEN 



Table 8.67-1 : +CEN parameter command syntax 



Command 


Possible response(s) 


+CEN= [<reporting>] 




+CEN? 


+CEN1 : <reporting> [ , <incc> , <mnc>] 
<CR><LF> [+CEN2 : <cat> , <number> 
[<CR><LF>+CEN2 : <cat> , <nuinber> 
[...]]] 


+CEN=? 


+CEN : (list of supported <reporting>s) 



Description 

This command allows for reading and dynamical reporting of emergency numbers as received from the network. The 
emergency numbers are not necessarily received for the same <incc> and <innc> as currently registered to. 

Read command returns one line of intermediate result code +CEN1 : <reporting> , <nicc> with the current 
<reporting> setting and the Mobile Country Code <mcc>. Then follows zero or more occurrences of the 
emergency numbers with intermediate result code +CEN2 : <cat> , <number>. 

Set command enables reporting of new emergency numbers received from the network with unsolicited result codes 
equal to the intermediate result codes of the read form of the command. 

Test command returns values supported as compound values. 

Defined values 

< report ing>: integer type. Enables and disables reporting of new emergency numbers received from the 
network. 

Disable reporting 

1 Enable reporting 

<mcc>: integer type. A three-digit value indicating mobile country code as defined in 
ITU-T Recommendation E.212 [10] Annex A. 

<mnc>: integer type. A three-digit value indicating the mobile network code. 

<cat>: integer type. A bitmap indicating the Emergency Service Category Value according to 3GPP TS 24.008 [8] 
table 10.5.135d. 

<number>: String type. Representing an emergency number from the list defined in 

3GPP TS 24.008 [8]subclause 10.5.3.13. The <number> is encoded with one digit per character and is 
applicable to the country indicated by <mcc>. 

Implementation 

Optional. 

8.68 Availability for voice calls with IIVIS +CAVII\/IS 



Table 8.68-1 : +CAViMS parameter command syntax 



Command 


Possible response(s) 


+CAVIMS= [<state>] 
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+CAVIMS? 


+CAVIMS: <state> 


+CAVIMS=? 


+CAVIMS : (list of supported <state>s) 



Description 

Set command informs the MT whether the UE is currently available for voice calls with the IMS (see 

3GPP TS 24.229 [89]). The information can be used by the MT to determine "IMS voice not available" as defined in 

3GPP TS 24.301 [83], and for mobility management for IMS voice termination, see 3GPP TS 24.008 [20]. 

Read command returns the UEs IMS voice call availabiUty status stored in the MT. 

Test command returns supported values. 

Defined values 

<state>: integer type. The UEs IMS voice call availability status. 

Voice calls with the IMS are not available 

1 Voice calls with the IMS are available 
Implementation 

Optional. 

8.69 Extended signal quality +CESQ 



Table 8.69-1 : +CESQ action command syntax 



Command 


Possible response(s) 


+CESQ 


+CESQ: <rssi>, <ber>, <rscp>, <ecno>, <rsrq>, <rsrp> 
+CME ERROR: <err> 


+CESQ=? 


+CESQ: {list of supported <rssi>s) , (Ust of supported <ber>s) , (list 
of supported <rep>s) , (list of supported <rscp>s) , (hst of supported 
<ecno>s) , (list of supported <rsrq>s) , (list of supported <rsrp>s) 



Description 

Execution command returns received signal quality parameters. If the current serving cell is not a GERAN cell, 
<rssi> and <ber> are set to value 99. If the current serving cell is not a UTRA FDD or UTRA TDD cell, <rscp> is 
set to 255. If the current serving cell is not a UTRA FDD cell, <ecno> is set to 255. If the current serving cell is not an 
E-UTRA cell, <rsrq> and <rsrp> are set to 255. 

Refer subclause 9.2 for possible <err> values. 

Test command returns values supported as compound values. 

Defined values 

<rssi>: integer type 

-113 dBm or less 

1 -111 dBm 
2...30 -109... -53 dBm 
31 -51 dBm or greater 

99 not known or not detectable 
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<ber>: integer type; channel bit error rate (in percent) 

0...7 as RXQUAL values in the table in 3GPP TS 45.008 [20] subclause 8.2.4 

99 not known or not detectable 
<rscp>: integer type, received signal code power (see 3GPP TS 25.133 [95] and 3GPP TS 25.123 [96]). 

-120 dBm or less 

1 -119 dBm 
2...95 -118... -25 dBm 
96 -24 dBm or greater 

255 not known or not detectable 
<ecno>: integer type, Ec/No (see 3GPP TS 25.133 [95]). 






-24 dBm or less 


1 


-23,5 dBm 


2 


-23 dBm 


3. ..46 


-22,5... -1 dBm 


47 


-0,5 dBm 


48 


OdBm 


49 


0,5 dBm or greater 


255 


not known or not detectable 



<rsrq>: integer type, reference signal received quality (see 3GPP TS 36.133 [96]). 

-19,5 dBm or less 

1 -19 dBm 

2 -18,5 dBm 

3. ..31 -18... -4 dBm 

32 -3,5 dBm 

33 -3 dBm 

34 -2,5 dBm or greater 

255 not known or not detectable 
<rsrp>: integer type, reference signal received power (see 3GPP TS 36.133 [96]). 

-140 dBm or less 

1 -139 dBm 
2...96 -138... -44 dBm 
97 -43 dBm or greater 

255 not known or not detectable 
Implementation 
Optional. 
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8.70 Informative examples 

Phone Activity Status (+CPAS) is a general command used to detect the presence of the MT, if there is an incoming 
call, or if there is a call in progress. This command is normally used before trying to operate the MT from the TE. Note 
that the activity status can change at any time after the execution of +CPAS, and hence the returned value can be 
obsolete. Detachment of the MT from the TA is indicated with a special final result code that indicates all errors related 
to the operation of the MT. Result code is +CME ERROR : <err>, where <err> is an integer or verbose value giving 
useful information about the reason for the command failure (refer subclause "Mobile Termination error result code 
+CME ERROR"). 

Set Phone Functionality (+CFUN) can be used to reset the MT or set the power consumption level of the MT by 
disabling certain parts of the MT (e.g. the transmit and receive RF circuits). Mobile Termination Control Mode 
(+CMEC) is a command which manages access sharing between the MT and the TE to operate the user interface of the 
MT. It has four subparameters which describe the access to keypad, display, indicators, and touch screen. Each 
subparameter has values for restricting the operation of the corresponding user interface part only to the MT or only to 
the TE, or to give the access for both of them. 

Keypad Control command (+CKPD) is used to operate the keypad of the MT. Here lies the problem of different keypad 
types between manufacturers, and also between their MT models. The keypresses are sent to the MT as a string type 
subparameter of this command. Each character in that string represents a key which will be logically pressed. A special 
character (colon) followed by any character can be used by manufacturers (or TE application programmers) to represent 
a key which is not defined in this profile. An escape character (semicolon) for direct string entering is also defined. All 
text between single semicolon characters is treated as an alphanumeric entry and is not converted to keypressings. All 
semicolon characters inside the text is duplicated in the TE and stripped back to one before entering them to the MT. 
Command has also optional second and third parameters which can be used to alter the time to strike each key, and the 
pause to wait between keystrokes (in tenths of a second). A special pause character (W or w) can be added in the string 
type subparameter for an extra pause of the same length as given by the third subparameter. In the following example 
alphanumeric mode is entered and a person predefined in the MT phonebook, "Ilkka", is called; each key is struck for 
half a second and pauses between strokes are a tenth of a second: 

AT+CKPD= " @ : I Ikka : S " , 5 , 1 

OK 

Display Control command (+CDIS) is used both for writing to the display text fields and for reading the current status 
of the fields. Mobile Termination usually has a character set of its own, so the TA will do a conversion between the TE 
and the MT character sets. TE can have several character sets and the TA must be informed of the character set in use 
before starting to write or read the display. Character set is set with general command Select TE Character Set +CSCS. 
The +CDIS=? query command is a way to get information about the length of the fields. In the following example an 
MT is first queried about the supported conversions and the lengths of the fields. The response shows there are three ten 
character long and two six character long fields. Then the TE character set is set to be IRA and the current status of the 
display is read. The last command writes the text "Hello, I'm writing to display" in the three fields, and keeps the 
contents of the two other fields same (the last two commas could also be left out). 

AT+CSCS=? ; +CDIS=? 

+CSCS: ("IRA", "PCCP850", "8859-1") 

+CDIS: 10,10,10,6,6 

OK 

AT+CSCS="IRA" 
OK 

AT+CDIS? 

+CDIS : "RADIOLINJA" , " " , " " , "Menu" , "Memory" 
OK 

AT+CDIS="IRA" , "Hello, I ' m" , "writing to" , "display" , , 
OK 

The writing is possible only when it is permitted by the Mobile Termination Control Mode command (and by the 
manufacturer). If a certain field is not writable (but is readable), writing to it is ignored. The order of the text fields is 
determined by manufacturers and follow the rule: first field is in the upper left comer, second in the next field to the 
right, and so on, until to the last field in the lower right comer. 

Touch screen action Control command (+CTSA) is used to operate the touch screen of the MT. The x, y coordinates of 
the phone are fixed even if the device is turned sideways or changes modes between landscape and portrait. In the 
following example commands are sent to the MT to emulate a user drawing on the touch screen. The screen is touched 
at location 10,10, then dragged to 50,50, then dragged to 100,100 and finally the touch screen is released at location 
100,100. 
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AT+CTSA=1, 10, 10 
AT+CTSA=1,50,50 
+CTSA=0, 100, 100 

Indicators can be handled with Indicator Control command (+CIND). Its query command returns a short description 
(abbreviation) of the piupose of the indicators and the supported values for each indicator. The setting and reading is 
done similarly as with Display Control command. In the following example the indicators of a phone are queried, their 
current value is read, and the value of message indicator is tried to set (but it is forbidden): 

AT+CIND=? 

+CIND: ("memory", (0-2) ) , ("call", (0,1) ) , ("data", (0,1) ) , ("roam", (0,1) ) , 

("alpha", (0,1) ) , ("message", (0,1) ) , ("indexl", (0-11) ) , ("index2", (0-11) ) , 

("index3", (0-11) ) , ("signal", (0-5) ) , ("service", (0,1) ) , ("sell", (0,1) ) , 

("sel2", (0,1) ) , ("sel3", (0,1) ) , ("battchg", (0-5) ) 
OK 

AT+CIND? 

+CIND : 1,0,0,0,0,1,0,0,0,3,1,0,0,0,5 
OK 

AT+CIND=, , , , , 
+CME ERROR: 10 

The subparameter order in the command is defined by the query command order, not by the actual display order. The 
zero value of an indicator means that it is off (or in state which can be identified as "off -state), value one means that 
the indicator is on (or in a state which is more substantial than "off-state), value two is more substantial than one, and 
so on. 

To this point, only operating through the TE is covered. But when MT can be operated also through its keypad, or touch 
screen, or there are changes in the status of the display elements, the information about these actions is given to the TE 
also. This can be solved only with unsolicited result codes which return keypad, display text and indicator, and touch 
screen events. Each event group has a result code of its own: +CKEV returns the key code and if the key pressed (1) or 
released (0), +CDEV returns the display text field miming number (as specified by command +CDIS) and the new 
status of the field, and +CIEV returns the running number of the indicator (refer +CIND) and the new value of it, and 
+CTEV returns the location of the action performed on the touch screen. In the following example number key 1 is 
pressed, updated on the display, released, and signal strength changes its state to five: 



+ CKEV 
+ CDEV 
+ CKEV 
+ CIND 



49,1 
1 , " 1 " 
49,0 
10,5 
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Mobile Termination Event Reporting command (+CMER) has been specified for the purpose of controlling the sending 
of these unsolicited result codes to the TE. Four ways are provided to handle the buffering of the result codes (see 
figure 8). The first is to buffer them always. The second possibility is to discard them when in on-line data mode and 
otherwise forward them directly to the TE. The third possibility is to buffer them in data mode and otherwise forward 
them to the TE. The last possibility is to send them always to the TE (some inband technique - e.g. V.80 - is used in data 
mode to send the result codes within the data). This is the first subparameter of +CMER command. Next three 
subparameters are used to enable or disable each of the keypad, text field and indicator result codes. Sending codes can 
be enabled either so that only events generated from the MT user interface are returned, or so that also events caused by 
Keypad, Display and Indicator Control commands are returned. The fifth subparameter controls the flushing of the 
buffer when the value of the first subparameter is changed to a value from one to three. 
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Figure 8: Mobile termination event reporting 



An example of complete setup of the TA where TE takes the control of keypad, but does not want to write to display 
nor control the indicators (in the start MT is powered off): 

(use verbose <err> values; report registration) 



AT+CMEE=2 ; +CREG=1 
OK 

AT+CPAS 
+CPAS: 5 
OK 

AT+CFUN=1 

+CME ERROR: SIM PIN required 
AT+CPIN= "1234" 

+CME ERROR: incorrect password (user entered wrong PIN) 
AT+CPIN= "4321" 



(query MT status) 
(MT is asleep) 

(set MT to full functionality state) 
(SIM requests PIN) 



(correct PIN) 

(ask for automatic operator selection and registration) 

(registered in the network) 

(get the operator name) 

(take over the keypad, leave display to MT) 

(query display text and indicator formats) 



OK 

AT+COPS=0, 
OK 

+CREG: 1 
AT+COPS? 

+COPS: 0, 0, "RADIOLINJA" 

OK 

AT+CMEC=1, 0, 
OK 

AT+CDIS=? ; +CIND=? 
+CDIS: 10,10,10,5,6 

+CIND: {"memory" , (0-2) ) , {"call" , (0,1)), {"data" , {0,1)), {"roam" , {0,1)), 
("alpha" , {0, 1) ) , {"message" , {0,1)), ("indexl" , {0-11) } , ("index2" , (0-11) ) , 
("index3" , (0-11) ) , ("signal" , (0-5) ) , ("service" , (0,1)), ("sell" ,(0,1)), 
("sel2", (0,1) ) , ("sel3", (0,1) ) , ("battchg", (0-5) ) 

OK 

AT+CSCS= " IRA" (set TE character set for display text results) 

OK 

AT+ CMER= 1,0,2,2,0 (return display text and indicator result codes when 

OK in command state, in data mode discard them) 

AT+CDIS? ; +CIND? (read current state of display texts and indicators) 

+CDIS: "",""," 12345" , "Menu" , "Memory" (user had pressed number buttons before 
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+CIND: 1,0,0,0,0,1,0,0,0,3,1,0,0,0,5 TE took control with +CMEC) 

OK 

AT+CKPD= " C " , 2 (clear main display text '12345' by holding the 

OK 'clear' button down two seconds) 

+CDEV: 3, "1234" (first only one character deleted) 

+CDEV : 3 , " " (while holding continues, whole display is cleared) 

+CDEV: 1 , "RADIOLINJA" (operator name comes to the display) 

The start of the previous example could go as follows when MT has already been powered on but is waiting for the 
PIN: 

AT+CMEE=2 ; +CREG=1 (use verbose <err> values; report registration) 

OK 

AT+CPAS (query MT status) 

+CPAS : (MT is ready to receive commands) 

OK 

AT+CPIN? (is MT asking passwords?) 

+CPIN: SIM PIN (yes, SIM PIN required) 

AT+CPIN= "4321" 

OK (correct PIN) 

One of the most regular operations done through the MT user interface is phonebook control. To lessen the workload of 
the TE, some direct commands for phonebook reading and writing are practical. Command Select Phonebook Memory 
Storage +CPBS query version returns supported phonebook memories, read version returns current settings, and set 
version selects the memory. For GSM, the normal storages are SIM, MT and TA. 

Read Phonebook Entries (+CPBR) can be used to read either one or many phonebook locations at the same time. A 
regular phonebook entry consists of three elements: memory index number, the phone number and its alphanumeric 
equivalent given by the user. Query version of this returns supported index values of the selected memory, and the 
maximum lengths of the number and alphanumeric elements. The query version of the Write Phonebook Entry 
command (+CPBW) is similar, but the action version sets or clears an entry in the phonebook. Find Phonebook Entries 
(+CPBF) can be used to search alphanumeric entries starting with specific string. An example where the whole 
phonebook of the MT is read, index number four is cleared, and number three is written: 

AT+CPBS=? 

+CPBS : ( "ME " , " SM" ) (MT and SIM have phonebooks) 

OK 

AT+CPBS="ME" (select MT memory) 

OK 

AT+CPBR= ? (read index range and element lengths) 

+CPBR: (1-99) ,30,30 
OK 

AT+CPBR=1 , 99 (read all entries but only the ones set are returned) 

+CPBR: 1, "931123456" , 129, "Ilkka" 
+CPBR: 2, "9501234567", 129, "" 
+CPBR: 4, "901234567" , 129, "Hesari" 

OK 

AT+CPBW=4;+CPBW=3, "921123456", , "TS" (clear index 4 and write index 3) 

OK 



9 Mobile termination errors 



9.1 Report mobile termination error +CMEE 



Table 110: +CMEE parameter command syntax 



Command 


Possible response(s) 


+CMEE= [<n>] 




+CMEE? 


+CMEE: <n> 


+CMEE=? 


+CMEE: (Ust of supported <n>s) 
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Description 

Set command disables or enables the use of final result code +CME ERROR : <err > as an indication of an error 
relating to the functionahty of the MT. When enabled, MT related errors cause +CME ERROR : <err> final result 
code instead of the regular ERROR final result code. ERROR is returned normally when error is related to syntax, invalid 
parameters, or TA functionality. 

Test command returns values supported as a compound value. 
Defined values 

<n>: integer type. 

disable +CME ERROR: <err> result code and use ERROR instead 

1 enable +CME ERROR : <err> result code and use numeric <err> values (refer subclause 9.2) 

2 enable +CME ERROR: <err> result code and use verbose <err> values (refer subclause 9.2) 
Implementation 

Mandatory for <n> values and 1. 

9.1a Report mobile originated location request error +CIVIOLRE 



Table 9.1 a-1: +CMOLRE parameter command syntax 



Command 


Possible response(s) 


+CMOLRE= [<n>] 




+CMOLRE? 


+CMOLRE : <n> 


+CMOLRE=? 


+CMOLRE: (list of supported <n>s) 



Description 

Set command disables or enables the verbose format of unsoUcited result code +CMOLRE : <err> as an indication of 
an error relating to the functionality for the mobile originated location request (MO-LR) error reporting format. When 
enabled, MT related verbose error cause is given. 

Test command returns values supported as a compound value. 

Defined values 

<n>: integer type. 

disable. This will give +CMOLRE : <err> result code with numeric <err> values (refer subclause 9.3) 

1 enable. This will give +CMOLRE : <err> result code with verbose <err> values (refer subclause 9.3) 
Implementation 

Optional. 



9.2 IVIobile termination error result code +CME ERROR 
9.2.0 General 

The operation of +CME ERROR : <err> final result code is similar to the regular ERROR result code: if 
+CME ERROR : <err> is the result code for any of the commands in a command line, none of the following 
commands in the same conamand line is executed (neither ERROR nor OK result code shall be returned as a result of a 
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completed command line execution). The format of <err> can be either numeric or verbose. This is set with command 
+CMEE (refer subclause 9.1). 

NOTE: ITU-T Recommendation V.250 [14] command V does not affect the format of this result code. 

<err> values (numeric format followed by verbose format): 

9.2.1 General errors 

Numeric Text 

phone failure 

1 no connection to phone 

2 phone-adaptor Unk reserved 

3 operation not allowed 

4 operation not supported 

5 PH-SIM PIN required 

6 PH-FSIM PIN required 

7 PH-FSlM PUK required 

10 SIM not inserted (See NOTE 1) 

11 SIM PIN required 

12 SIM PUK required 

1 3 SIM failure (See NOTE 1) 

14 SIM busy (See NOTE 1) 

15 SIM wrong (See NOTE 1) 

16 incorrect password 

17 SIM PIN2 required 

18 SIM PUK2 required 

20 memory full 

21 invalid index 

22 not found 

23 memory failure 

24 text string too long 

25 invalid characters in text string 

26 dial string too long 

27 invalid characters in dial string 

30 no network service 

3 1 network timeout 

32 network not allowed - emergency calls only 

40 network personalization PIN required 

41 network personalization PUK required 

42 network subset personalization PIN required 

43 network subset personalization PUK required 

44 service provider personalization PIN required 

45 service provider personalization PUK required 

46 corporate personalization PIN required 

47 corporate personalization PUK required 

48 hidden key required (See NOTE 2) 

49 EAP method not supported 

50 Incorrect parameters 
100 unknown 

NOTE 1: This error code is also appUcable to UICC. 

NOTE 2: This key is required when accessing hidden phonebook entries. 

9.2.2 GPRS-related errors 

9.2.2.1 Errors related to a failure to perform an attach 

Numeric Text 
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103 Illegal MS (#3) 

106 Illegal ME (#6) 

107 GPRS services not allowed (#7) 

1 1 1 PLMN not allowed (#1 1) 

112 Location area not allowed (# 1 2) 

113 Roaming not allowed in this location area (#13) 

NOTE: Values in parentheses are 3GPP TS 24.008 [8] cause codes. 

9.2.2.2 Errors related to a failure to activate a context 

Numeric Text 

132 service option not supported (#32) 

133 requested service option not subscribed (#33) 

134 service option temporarily out of order (#34) 

149 PDP authentication failure 

NOTE: Values in parentheses are 3GPP TS 24.008 [8] cause codes. 

9.2.2.3 Errors related to a failure to disconnect a PDN 

Numeric Text 

151 Last PDN disconnection not allowed (#49) 

NOTE 1 : This error is returned when the MT detects an attempt to disconnect the last PDN or the network returns a 
response message with cause value #49. 

NOTE 2: Values in parentheses are 3GPP TS 24.301 [83] cause codes. 

9.2.2.4 Other GPRS errors 

Numeric Text 

148 unspecified GPRS error 

150 invalid mobile class 

Other values in the range 101 - 150 are reserved for use by GPRS 

9.2.3 VBS / VGCS and eMLPP -related errors 



Numeric 


Text 


151 


VBS/VGCS not supported by the network 


152 


No service subscription on SIM 


153 


No subscription for group ID 


154 


Group Id not activated on SIM 


155 


No matching notification 


156 


VBS/VGCS call already present 


157 


Congestion 


158 


Network failure 


159 


UpUnk busy 


160 


No access rights for SIM file 


161 


No subscription for priority 


162 


operation not appUcable or not possible 


163 


Group Id prefixes not supported 


164 


Group Id prefixes not usable for VBS 


165 


Group Id prefix value invalid 



Other values in the range 151 - 170 are reserved for use by VBS/VGCS and eMLPP 
Also all other values below 256 are reserved 
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Implementation 

Mandatory for numeric format codes applicable to implemented command set. 

9.3 Mobile termination error result code +CMOLRE 

9.3.1 General 

The operation of +CMOLRE : <err> unsolicited result code is similar to the regular ERROR result code. The format of 
<err> can be either numeric or verbose. This is set with command +CMOLRE (refer subclause 9.1a). 

<err> values (numeric format followed by verbose format): 

9.3.2 Errors 

Numeric Text 

Method not supported 

1 Additional assistance data reqired 

2 Not enough satelhtes 

3 UE busy (See NOTE) 

4 Network error 

5 Failed to open internet connection, too many connections 

6 Failed to open internet connection, too many users 

7 Failure due to handover 

8 Internet connection failure 

9 Memory error 
255 Unknown error 

NOTE: Error code 3 (UE busy) indicates there is already one ongoing positioning session and the UE does not 
support multiple simultaneous sessions 



9.4 Informative examples 

An example of TA responses with all three +CMEE values when MT manufacturer identification is requested but MT is 
not cormected to the TA: 

AT+CMEE=0 (+CME ERROR shall not be used) 
OK 

AT+CGMI 

ERROR 

AT+CMEE=1 (use numeric <err>) 
OK 

AT+CGMI 

+CME ERROR: 1 

AT+CMEE=2 (use verbose <err>) 
OK 

AT+CGMI 

+CME ERROR: no connection to phone 



10 Commands for Packet Domain 
10.0 General 

This clause defines commands that a TE can use to control a MT supporting packet switched services. Some aspects of 
a Packet Domain MT are described in 3GPP TS 27.060 [34]. 

It is anticipated that Packet Domain MTs will vary widely in functionality. At one extreme, a MT supporting CS/PS or 
class-A mode of operation might support multiple PDP types as well as circuit switched data, and use multiple external 
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networks and QoS profiles. At the other extreme a MT supporting only PS or class-C mode of operation might support 
only a single PDP type using a single external network, and rely on the HLR to contain the PDP context definition. 

A comprehensive set of Packet Domain- specific commands is defined in subclause 10.1 to provide the flexibiUty 
needed by the more complex MT. The commands are designed to be expandable to accommodate new PDP types and 
interface protocols, merely by defining new values for many of the parameters. Multiple contexts can be activated if the 
interface link-layer protocol is able to support them. The commands use the extended information and error message 
capabilities described in this specification. 

For MTs of intermediate complexity, most commands have simplified forms where certain parameters can be omitted. 

For the simplest MTs, and for backwards compatibility with existing communications software, it is possible to control 
access to the Packet Domain using existing modem-compatible commands. A special dial-string syntax is defined for 
use with the D command. This "modem compatible" mode of operation is described in subclause 10.2. 

A discussion on the interaction of the AT commands. Packet Domain Management and Packet Data Protocols, together 
with examples of command sequences for a number of applications can be found in 3GPP TS 27.060 [34]. 

1 0.1 Commands specific to IVITs supporting the Packet Domain 
10.1.0 General remark about EPS bearer contexts and PDP contexts 

Accordingly to 3GPP TS 23.401 [82], there is a 1 to 1 mapping between active EPS bearer context and active PDP 
context: 

- An active default EPS bearer context is associated with an active non secondary PDP context. 

- An active dedicated EPS bearer context is associated with an active secondary PDP context. 

In consequence to the implicit logical relation between EPS PDN connection and its associated Default EPS Bearer, 
hereafter a same non secondary PDP context identifier <p_cid> can be used to refer either an EPS PDN connection 
context or its associated Default EPS Bearer context. 

As dedicated EPS bearer contexts are activated by the network, the network can then activate a new dedicated EPS 
bearer or modify an existing one to fulfil the request.For bearer resources activated by the network a context identifier is 
allocated by the MT/TA. 

For easy reading the term PDP context is used for PDP contexts in UMTS/GPRS as well as PDN/default EPS bearers 
and traffic flows in EPS. 



Table 10.1.0-1 : AT commands/results applicable for EPS 
(equivalence between PDP context / PDN Connection or Default EPS Bearer) 



AT commands 


Comments 


+CGDCONT 


Used to define PDN connection for EPS. 


+CGACT 


Used to activate a bearer resource for EPS. 


+CGCONTRDP 


Used to show dynamically allocated PDN parameters. 


+CGEV: XXX . . . 


Used to indicate EPS bearers operations status. 


Table 10.1.0-2: AT commands/results applicable for EPS 
(equivalence between PDP context / EPS Bearer Resources) 


AT connmands 


Comments 


+CGACT 


Used to activate a modification of a PDP context or 
EPS bearer resource. 
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+CGDSCONT 


Used to define EPS Bearer Resource for a specific 
PDNfor EPS. 


+CGSCONTRDP 


Used to show dynamically allocated EPS Bearer 
Resource parameters. 




Used to request a modification of a PDP context or 
EPS Bearer Resource. 




Used to define a Traffic Flow Template for a PDP 
context or a Traffic Flow Aggregate for an EPS bearer 
resource. 


+CGTFTRDP 


Used to show the network assigned Traffic Flow 
Template for an EPS bearer resource. 


+CGEQOS 


Used to define the EPS bearer resource Quality of 
Service parameter. 

In UMTS/GPRS mode this would hold a mapping 
runction to tne uiviio/orKo vOo parameters. 


+CGEQOSRDP 


Used to show the network assigned EPS QoS 
parameters for an EPS bearer resource. 
In UMTS/GPRS mode this would hold a mapping 
function to the UMTS/GPRS QoS parameters. 


+CGEV: XXX . . . 


Used to indicate EPS PDN connection and bearer 
resources operations status 


Table 10.1.0-3: AT commands applicable for EPS 


AT commands 


Comments 


+CGATT 


Used to attach/detach the MT from the Packet Domain 
service. 



1 0.1 .1 Define PDP Context +CGDCONT 



Table 111 : +CGDCONT parameter command syntax 



Command 


Possible response(s) 


+CGDCONT= [<cid> [ , <PDP_type> [ , <APN> [ , <PD 
P addr>[,<d comp>[,<h comp> [ , <IPv4AddrA 
lloo [ , <emergency indication> [ , <P- 
CSCF discovery> [ , <IM CN Signalling Flag 
_lnd>] ]]]]]]]]] 


OK 

ERROR 


+CGDCONT? 


+CGDCONT : <cid> , <PDP_type> , <APN> , <PDP_ad 
dr>,<d comp>,<h coinp> [ , <IPv4AddrAlloc> [ , 
<emergency indication> [, <P- 
CSCF discovery> [ , <IM CN Signalling Flag 
lnd>] ] ] ] 

[<CR><LF>+CGDCONT: <cid>,<PDP type>,<APN 

>,<PDP addr>,<d comp>,<h comp> [ , <IPv4Add 
rAlloo [ , <emergency indication> [ , <P- 
CSCF discovery> [ , <IM CN Signalling Flag 
lnd>] ] ] ] 
[...]] 
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+CGDCONT=? 



+CGDCONT : {range of supported 

<cid>s) ,<PDP_type>, , , (list of supported 

<d_comp>s) , (list of supported <h_comp>s) , (list of 

supported <IPv4AddrAlloc>s) , (list of supported 

<emergency indication>s) , (list of supported <P- 

CSCF_discovery>s) , (list of supported 

< IM_CN_S ignal 1 ing_Flag_Ind>s) 

[<CR><LF>+CGDCONT : (range of supported 
<cid>s) ,<PDP_type>, , , (list of supported 
<d_comp>s) , (list of supported <h_comp>s) , (list of 
supported <IPv4AddrAlloc>s) , (Ust of supported 
<emergency indication>s) , (list of supported <P- 
CSCF_discovery>s) , (list of supported 
< I M_CN_S i gna 1 1 ing_F 1 ag_I nd > s) 
[...]] 



Description 

The set command specifies PDP context parameter values for a PDP context identified by the (local) context 
identification parameter, <cid>. The number of PDP contexts that may be in a defined state at the same time is given 
by the range returned by the test command. 

For EPS the PDN connection and its associated EPS default bearer is identified herewith. For EPS the <PDP_addr> 

parameter value shall be omitted. 

A special form of the set command, +CGDCONT=<cid> causes the values for context number <cid> to become 
undefined. 

The read command returns the current settings for each defined context. 

The test command returns values supported as a compound value. If the MT supports several PDP types, 
<PDP_type>, the parameter value ranges for each <PDP_type> are returned on a separate Une. 

Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition. The parameter is local to the TE- 
MT interface and is used in other PDP context-related commands. The range of permitted values (minimum 
value = I) is returned by the test form of the command. 

NOTE I: The <cid>s for network-initiated PDP contexts will have values outside the ranges indicated for the 
<cid> in the test form of the conmiands +CGDCONT and +CGDSCONT. 

<PDP_type>: a string parameter which specifies the type of packet data protocol 

X.25 ITU-T/CCITT X.25 layer 3 (Obsolete) 

IP Internet Protocol (IETF STD 5) 

IPV6 Internet Protocol, version 6 (IETF RFC 2460) 

IPV4V6 Virtual <PDP_type> introduced to handle dual IP stack UE capability. (See 
3GPPTS 24.301 [83]) 

OSPIH Internet Hosted Octect Stream Protocol (Obsolete) 

PPP Point to Point Protocol (IETF STD 5 1) 

NOTE 2: Only IP, 1PV6 and 1PV4V6 values are supported for EPS services. 

<APN>: a string parameter which is a logical name that is used to select the GGSN or the external packet data 
network. 
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If the value is null or omitted, then the subscription value will be requested. 

<PDP_addr>: a string parameter that identifies the MT in the address space appUcable to the PDP. 

If the parameter value is null or omitted, then a value may be provided by the TE during the PDP startup 
procedure or, failing that, a dynamic address will be requested. 

The read form of the command will continue to return the null string even if an address has been allocated during 
the PDP startup procedure. The allocated address(es) may be read using the +CGPADDR command. 

When +CGPIAF is supported, it"s settings can influence the format of this parameterreturned with the read 

form of +CGDCONT. 

NOTE 3: For EPS, this field or the parameter value of the field is omitted. 

<d_comp>: a numeric parameter that controls PDP data compression (appUcable for SNDCP only) (refer 
3GPPTS 44.065 [61]) 

off 

1 on (manufacturer preferred compression) 

2 V.42bis 

3 V.44 

Other values are reserved. 

<h_comp>: a numeric parameter that controls PDP header compression (refer 3GPP TS 44.065 [61] and 
3GPPTS 25.323 [62]) 

off 

1 on (manufacturer preferred compression) 

2 RFCl 144 (appUcable for SNDCP only) 

3 RFC2507 

4 RFC3095 (appUcable for PDCP only) 
Other values are reserved. 

< I Pv4 Addr Al 1 oc>: a numeric parameter that controls how the MT/TA requests to get the IPv4 address 
information 

IPv4 Address Allocation through NAS SignaUing 

1 IPv4 Address AUocated through DHCP 

<emergency indicat ion> : a numeric parameter used to indicate whether the PDP context is for emergency 
bearer services or not. 

PDP context is not for emergency bearer services 

1 PDP context is for emergency bearer services 

<P-CSCF_discovery>: a numeric parameter influences how the MT/TA requests to get the P-CSCF address, 
see 3GPP TS 24.229 [89] annex B and annex L. 

Preference of P-CSCF address discovery not influenced by +CGDCONT 

1 Preference of P-CSCF address discovery through NAS SignalUng 

2 Preference of P-CSCF address discovery through DHCP 
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<IM_CN_Signalling_Flag_Ind> : a numeric parameter used to indicate to the network whether the PDP 
context is for IM CN subsystem-related signalling only or not. 

UE indicates that the PDP context is not for IM CN subsystem-related signalling only 

1 UE indicates that the PDP context is for IM CN subsystem-related signalhng only 
Implementation 

Mandatory unless only a single subscribed context is supported. 

10.1.2 Define Secondary PDP Context +CGDSCONT 



Table 112: +CGDSCONT parameter command syntax 



Command 


Possible response(s) 


+CGDSCONT= [<cid> , <p cid>[,<d comp>[,<h 
comp>[,<IM CN Signalling Flag Ind>] ] ] ] 


OK 

ERROR 


+CGDSCONT? 


+CGDSCONT: <cid>,<p cid>,<d comp>,<h com 
p>,<IM CN Signalling Flag Ind> 

[<CR><LF>+CGDSCONT : <cid>,<p cid>,<d com 
p>,<h comp>,<IM CN Signalling Flag Ind> 

[...]] 


+CGDSCONT=? 


+CGDSCONT : (range of supported <cid>s) , (list of 
<p cid>s for active primary contexts) , (list of supported 
<d comp>s) , (list of supported <h comp>s) , (list of 
supported <IM CN Signalling Flag Ind>s) 



Description 

The set command specifies PDP context parameter values for a Secondary PDP context identified by the (local) context 
identification parameter, <cid>. The number of PDP contexts that may be in a defined state at the same time is given 
by the range returned by the test command. 

In EPS the command is used to define traffic flows. 

A special form of the set command, +CGDSCONT=<cid> causes the values for context number <cid> to become 
undefined. 

The read command returns the current settings for each defined context. 
Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition. The parameter is local to the TE- 
MT interface and is used in other PDP context-related commands. The range of permitted values (minimum 
value = 1) is returned by the test form of the command. 

NOTE: The <cid>s for network-initiated PDP contexts will have values outside the ranges indicated for the 
<cid> in the test form of the conamands +CGDCONT and +CGDSCONT. 

<p_cid>: a numeric parameter which specifies a particular PDP context definition which has been specified by use 
of the +CGDCONT command. The parameter is local to the TE-MT interface. The list of permitted values is 
returned by the test form of the command. 

<d_comp>: a numeric parameter that controls PDP data compression (applicable for SNDCPonly) (refer 
3GPPTS 44.065 [61]) 

off 

1 on (manufacturer preferred compression) 
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2 V.42bis 

3 V.44 

Other values are reserved. 

<h_comp>: a numeric parameter that controls PDP header compression (refer 3GPP TS 44.065 [61] and 
3GPPTS 25.323 [62]) 

off 

1 on (manufacturer preferred compression) 

2 RFCl 144 (apphcable for SNDCP only) 

3 RFC2507 

4 RFC3095 (apphcable for PDCP only) 
Other values are reserved. 

<IM_CN_Signalling_Flag_Ind> : a numeric parameter used to indicate to the network whether the PDP 
context is for IM CN subsystem-related signalling only or not. 

UE indicates that the PDP context is not for IM CN subsystem-related signalling only 

1 UE indicates that the PDP context is for IM CN subsystem-related signalhng only 
Implementation 

Optional. 
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10.1.3 Traffic Flow Template +CGTFT 



Table 113: +CGTFT parameter command syntax 



Command 


Possible Response(s) 


+CGTFT= [<cid> , [<packet filter 
identif ier>, <evaluation precedence 
index> [ , <source address and subnet 
mask> [ , <protocol number {ipv4) / next 
header (ipv6) > [ , <destination port 
range> [ , <source port range> [ , <ipsec 
security parameter index (spi) > [ , <type 
of service (tos) (ipv4) and mask / 
traffic class (ipv6) and mask>[,<flow 
label (ipv6) > [ , <direction>] ]]]]]]]]] 


OK 

ERROR 


+CGTFT? 


+CGTFT: <cid> , <packet filter 
identif ier>, <evaluation precedence 
index> , <source address and subnet 
mask> , <protocol number (ipv4) / next 
header (ipv6) >, <destination port 
range> ,< source port range> , <ipsec 
security parameter index (spi)>,<type 
of service (tos) (ipv4) and mask / 
traffic class (ipv6) and mask>,<flow 
label (ipv6) >, <direction> 

[<CR><LF>+CGTFT : <cid> , <packet filter 
identif ier>, <evaluation precedence 
index>, < source address and subnet 
mask> , <protocol number (ipv4) / next 
header ( ipv6 ) > , <destination port 
range>, <source port range> , <ipsec 
security parameter index (spi)>,<type 
of service (tos) (ipv4) and mask / 
traffic class (ipv6) and mask>,<flow 
label (ipv6) >, <direction> 

[...]] 
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Command 


Possible Response(s) 


+CGTFT=? 


+CGTFT : <PDP_type> , (list of supported <packet 
filter identif ier>s) , (list of supported 
<evaluation precedence index>s) , (list of 
supported <source address and subnet 
mask>s) , (Ust of supported <protocol number 
(ipv4) / next header (ipv6) >s) , (listof 
supported <destination port range >s ) , (listof 
supported < source port range >s ), (listof 
supported <ipsec security parameter index 
(spi) >s) , (list of supported <type of service 
(tos) (ipv4) and mask / traffic class 
(ipv6) and mask>s) , (list of supported <flow 
label (ipv6)>s) , (list of supported 
<direction>s) 

[<CR><LF>+CGTFT: <PDP_type>, (Ust of 
supported <packet filter identif ier>s) , (Ust 
of supported <evaluation precedence 
index>s) , (Ust of supported <source address 
and subnet mask>s) , (list of supported 
<protocol number (ipv4) / next header 

(ipv6)>s), (Ust of supported <destination 
port range >s ), (list of supported <source port 
range>s) , (list of supported <ipsec security 
parameter index (spi) >s) , (Ust of supported 

^ j- \ Tr~\ o o "F d o T"T7" nr^o { \' f-\^\ { "y "mrA ^ anH macilr 

/ traffic class (ipv6) and mask>s) , (list 
of supported <flow label (ipv6) >s) , (listof 
supported <direction>s) 

[...]] 



Description 

This command allows the TE to specify a Packet Filter - PF for a Traffic Flow Template - TFT that is used in the 
GGSN in UMTS/GPRS and Packet GW in EPS for routing of packets onto different QoS flows towards the TE. The 
concept is further described in the 3GPP TS 23.060 [47]. A TFT consists of from one and up to 16 Packet Filters, each 
identified by a unique <packet filter identif ier>. A Packet Filter also has an <evaluation 
precedence index> that is unique within all TFTs associated with all PDP contexts that are associated with the 
same PDP address. 

The set conmiand specifies a Packet Filter that is to be added to the TFT stored in the MT and used for the context 
identified by the (local) context identification parameter, <cid>. The specified TFT will be stored in the GGSN in 
UMTS/GPRS and Packet GW in EPS only at activation or MS-initiated modification of the related context. Since this is 
the same parameter that is used in the +CGDCONT and +CGDSCONT commands, the +CGTFT command is effectively 
an extension to these commands. The Packet Filters consist of a number of parameters, each of which may be set to a 
separate value. 

A special form of the set command, +CGTFT=<cid> causes all of the Packet Filters in the TFT for context number 
<cid> to become undefined. At any time there may exist only one PDP context with no associated TFT amongst all 
PDP contexts associated to one PDP address. At an attempt to delete a TFT, which would violate this rule, an ERROR or 
+CME ERROR response is returned. Extended error responses are enabled by the +CMEE conmiand. 

The read conmiand retums the current settings for all Packet Filters for each defined context. 

The test command returns values supported as a compoimd value. If the MT supports several PDP types, the parameter 
value ranges for each PDP type are returned on a separate line. TFTs shall be used for PDP-type IP and PPP only. For 
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PDP-type PPP a TFT is applicable only when IP traffic is carried over PPP. If PPP carries header-compressed IP 
packets, then a TFT cannot be used. 

Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition (see the +CGDCONT and 

+CGDSCONT commands). 

The following parameters are defined in 3GPP TS 23.060 [47]: 

<packet filter identifier>: a numeric parameter, value range from 1 to 16. 
<evaluat ion precedence index>: a numeric parameter. The value range is from to 255. 

<source address and subnet mask>: string type. The string is given as dot-separated numeric (0-255) 

parameters on the form: 
"al.a2.a3.a4.ml.m2.m3.m4" for IPv4 or 

"al.a2.a3.a4.a5.a6.a7.a8.a9.al0.all.al2.al3.al4.al5.al6.ml.m2.m3.m4.m5.m6.m7.m8.m9.ml0.mll.ml2.ml3. 
ml4.ml5.ml6", for IPv6. 

When +CGPIAF is supported, it"s settings can influence the format of this parameter returned with the read 
form of +CGTFT. 

<protocol number (ipv4) / next header ( ipv6) >: a numeric parameter, value range from to 
255. 

<destination port range>: string type. The string is given as dot-separated numeric (0-65535) parameters 
on the form "f.t". 

< source port range >: string type. The string is given as dot-separated numeric (0-65535) parameters on the 
form "f.t". 

< ipsec security parameter index ( spi ) >: numeric value in hexadecimal format. The value range is 
fi-om 00000000 to FFFFFFFF. 

<type of service (tos) (ipv4) and mask / traffic class (ipv6) and mask>: 
string type. The string is given as dot-separated numeric (0-255) parameters on the form "t.m". 

<flow label (ipv6) >: numeric value in hexadecimal format. The value range is from 00000 to FFFFF. Valid 
for IPv6 only. 

<direction>: a numeric parameter which specifies the transmission direction in which the packet filter shall be 
applied. 

Pre-Release 7 TFT filter (see 3GPP TS 24.008 [8], table 10.5.162) 

1 Uphnk 

2 Downlink 

3 Birectional (Up & Downhnk) 

Some of the above hsted attributes may coexist in a Packet Filter while others mutually exclude each other, the possible 
combinations are shown in 3GPP TS 23.060 [47]. 

Implementation 

Optional. 
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1 0. 1 .4 Quality of Service Profile (Requested) +CGQREQ 



Table 114: +CGQREQ parameter command syntax 



Command 


Possible Response(s) 


+CGQREQ= [<cid> [ , <preced.ence> [ , <d.elay> [ , 
<reliability> [ , <peak> [ , <niean>] ] ] ] ] ] 


OK 

ERROR 


+CGQREQ? 


+CGQREQ : <cid> , <precedence> , <delay> , <re 
liability> , <peak> , <niean> 

[<CR><LF>+CGQREQ : <cid> , <precedence> , <d 
elay> , <reliability> , <peak> , <mean> 

[...]] 


+CGQREQ=? 


+CGQREQ : <PDP_type> , (list of supported 
<precedence>s) , (list of supported 
<delay>s) , (list of supported 
<reliability>s) , (list of supported 
<peak;>s) , (list of supported <mean>s) 

[<CR><LF>+CGQREQ: <PDP_type>, (list of 
supported <precedence>s) , (list of supported 
<delay>s) , (list of supported 
<reliability>s) , ( list of supported 
<peak>s) , (list of supported <inean>s) 

[...]] 



Description 

This command allows the TE to specify a Quality of Service Profile that is used when the MX activates a PDF context. 

The set command specifies a profile for the context identified by the (local) context identification parameter, <cid>. 
Since this is the same parameter that is used in the +CGDCONT and +CGDSCONT commands, the +CGQREQ command 
is effectively an extension to these commands. The QoS profile consists of a number of parameters, each of which may 
be set to a separate value. 

A special form of the set command, +CGQREQ=<cid> causes the requested profile for context number <cid> to 
become undefined. 

The read command returns the current settings for each defined context. 

The test command returns values supported as a compound value. If the MT supports several PDP types, the parameter 
value ranges for each PDP type are returned on a separate line. 

Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition (see the +CGDCONT and 

+CGDSCONT commands). 

The following parameters are defined in 3GPP TS 23.107 [46]: 

<precedence>: a numeric parameter which specifies the precedence class 

<delay>: a numeric parameter which specifies the delay class 

<reliability>: a numeric parameter which specifies the reliability class 

<peak>: a numeric parameter which specifies the peak throughput class 

<mean>: a numeric parameter which specifies the mean throughput class 
If a value is omitted for a particular class then the value is considered to be unspecified. 
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Implementation 

Optional. If the command is not implemented then all the values are considered to be unspecified. 
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10.1.5 Quality of Service Profile (Minimum acceptable) +CGQMIN 



Table 115: +CGQMIN parameter command syntax 



Command 


Possible Response(s) 


+CGQMIN= [<cid> [ , <precedence> [ , <delay> [ , 
<reliability> [ , <peak> [ , <inean>] ] ] ] ] ] 


OK 

ERROR 


+CGQMIN? 


+CGQMIN : <cid> , <precedence> , <delay> , <re 
liability> , <peak> , <niean> 

[<CR><LF>+CGQMIN: <cid>, <precedence> , <d 
elay> , <reliability> , <peak> , <inean> 

[...]] 


+CGQMIN=? 


+CGQMIN: <PDP type >, (list of supported 
<precedence>s) , (list of supported 
<delay>s) , (list of supported 
<reliability>s) , ( list of supported 
<peak;>s) , (Ust of supported <inean>s) 

[<CR><LF>+CGQMIN: <PDP_type>, (list of 
supported <precedence>s) , (list of supported 
<delay>s) , (list of supported 
<reliability>s) , (list of supported 
<peak>s) , (Ust of supported <mean>s) 

[...]] 



Description 

This command allows the TE to specify a minimum acceptable profile which is checked by the MT against the 
negotiated profile when the PDP context is activated. 

The set command specifies a profile for the context identified by the (local) context identification parameter, <cid>. 
Since this is the same parameter that is used in the +CGDCONT and +CGDSCONT commands, the +CGQMIN command 
is effectively an extension to these commands. The QoS profile consists of a number of parameters, each of which may 
be set to a separate value. 

A special form of the set command, +CGQMIN=<cid> causes the minimum acceptable profile for context number 
<cid> to become undefined. In this case no check is made against the negotiated profile. 

The read conunand returns the current settings for each defined context. 

The test command returns values supported as a compound value. If the MT supports several PDP types, the parameter 
value ranges for each PDP type are returned on a separate line. 

Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition (see the +CGDCONT and 
+CGDSCONT commands). 

The following parameters are defined in 3GPP TS 23.107 [46]: 

<precedence>: a numeric parameter which specifies the precedence class 

<delay>: a numeric parameter which specifies the delay class 

<reliability>: a numeric parameter which specifies the reliability class 

<peak>: a numeric parameter which specifies the peak throughput class 

<mean>: a numeric parameter which specifies the mean throughput class 
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If a value is omitted for a particular class then this class is not checked. 
Implementation 

Optional. If the command is not implemented then no check is made against the negotiated profile. 

1 0.1 .6 3G Quality of Service Profile (Requested) +CGEQREQ 



Table 116: +CGEQREQ parameter command syntax 



Command 


Possible Response(s) 


+CGEQREQ= [<cid> [ , <Traf f ic 

class> [ , <Maximum bitrate UL> [ , <Maximum 

bitrate DL> [ , <Guaranteed bitrate 

UL> [ , <Guaranteed bitrate DL> [ , <Delivery 

order> [ , <Maximum SDU size>[,<SDU error 

ratio [, <Residual bit error 

ratio [, <Delivery of erroneous 

SDUs> [ , <Transf er delay> [ , <Traf f ic 

handling priority> [ , <Source statistics 

descriptor> [ , <Signalling 

indication>] ]]]]]]]]]]]]]] 


OK 

ERROR 


+CGEQREQ? 


+CGEQREQ: <cid> , <Traf f ic 

class> , <Maximuni bitrate UL> , <Maxiniuiti 

bitrate DL>, <Guaranteed bitrate 

UL> , <Guaranteed bitrate DL> , <Delivery 

order> , <Maximum SDU size>,<SDU error 

ratio , <Residual bit error 

ratio , <Delivery of erroneous 

SDUs> , <Transf er delay> , <Traf f ic 

handling priority> , <Source statistics 

descriptor> , <Signalling indication> 

[<CR><LF>+CGEQREQ : <cid> , <Traf f ic 
class> , <Maximum bitrate UL> , <Maximuni 
bitrate DL> , <Guaranteed bitrate 
UL> , <Guaranteed bitrate DL> , <Delivery 
order> , <Maximum SDU size>,<SDU error 
ratio , <Residual bit error 
ratio , <Delivery of erroneous 
SDUs> , <Transf er delay> , <Traf f ic 
handling priority> , <Source Statistics 
Descriptor> , <Signalling Indication> 

[...]] 


+CGEQREQ=? 


+CGEOREO* <PDP tvDe> (list of sunnorted 
<Traffic class>s) , (list of supported <iyiaximum 
bitrate UL>s) , (list of supported <Maxiniuni 
bitrate DL>s) , (list of supported <Guaranteed 
bitrate UL>s) , (list of supported <Guaranteed 
bitrate DL>s) , (list of supported <Delivery 
order>s) , (list of supported <Maximum SDU 
size>s) , (Ust of supported <SDU error 
ratio>s) , (list of supported < Re si dual bit 
error ratio>s) , (list of supported <Delivery of 
erroneous SDUs>s) , (Ust of supported <Transfer 
delay>s) , (list of supported <Traffic handling 
priority>s) , (list of supported <Source 
statistics descriptor>s) , (Ust of supported 
<Signalling indication>s) 
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Command 


Possible Response(s) 




[<CR><LF>+CGEQREQ: <PDP_type>, (list of 
supported <Traffic class>s) , (list of supported 
<Maximum bitrate UL>s) , (list of supported 
<Maximum bitrate DL>s) , ( list of supported 
<Guaranteed bitrate UL>s) , ( list of supported 
<Guaranteed bitrate DL>s) , (list of supported 
<Delivery ord.er>s) , (list of supported < Maximum 
SDU size>s) , (Ust of supported <SDU error 
ratio>s) , (list of supported < Re si dual bit 
error ratio>s) , (list of supported <Delivery of 
erroneous SDUs>s) , (list of supported <Transfer 

Hf^1;=i'\7'-^*;^ Mi^t c\f *;iinnnrtpH <^T'T*?^'F'F"ir' VianHI "inn 

d J. d y ^ J J / \JL JUIJ IJKJl Lx^U ^J.J-CIJ-J Lk^ IICLJ. IvJ. J L±J.V-< 

priority>s) , (list of supported <Source 
statistics descriptor>s) , ( list of supported 
<Signalling indication>s) 

[...]] 



Description 

This command allows the TE to specify a UMTS Quality of Service Profile that is used when the MT activates a PDP 
context. 

The set command specifies a profile for the context identified by the (local) context identification parameter, <cid>. 
The specified profile will be stored in the MT and sent to the network only at activation or MS-initiated modification of 
the related context. Since this is the same parameter that is used in the +CGDCONT and +CGDSCONT commands, the 
+CGEQREQ command is effectively an extension to these commands. The QoS profile consists of a number of 
parameters, each of which may be set to a separate value. 

A special form of the set command, +CGEQREQ=<cid> causes the requested profile for context number <cid> to 
become undefined. 

The read command returns the current settings for each defined context. 

The test command returns values supported as a compoimd value. If the MT supports several PDP types, the parameter 
value ranges for each PDP type are returned on a separate line. 

Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition (see +CGDCONT and +CGDSCONT 
commands). 

The following parameters are defined in 3 GPP TS 23.107 [46]: 

<Traffic class>:a numeric parameter that indicates the type of appUcation for which the UMTS bearer 
service is optimised. 






conversational 


1 


streaming 


2 


interactive 


3 


background 


4 


subscribed value 



If the Traffic class is specified as conversational or streaming, then the Guaranteed and Maximum bitrate 
parameters should also be provided. Other values are reserved. 
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<Maximum bitrate UL> : a numeric parameter that indicates the maximum number of kbits/s delivered to 
UMTS (up-link traffic) at a SAP. As an example a bitrate of 32kbit/s would be specified as '32' (e.g. 
AT+CGEQREQ=..., 32 , ...). This parameter should be provided if the Traffic class is specified as conversational 
or streaming (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Maximum bitrate DL> : a numeric parameter that indicates the maximum number of kbits/s delivered by 
UMTS (down-Unk traffic) at a SAP. As an example a bitrate of 32kbit/s would be specified as '32' (e.g. 
AT+CGEQREQ=... ,32, ...). If the parameter is set to '0' the subscribed value will be requested. This parameter 
should be provided if the Traffic class is specified as conversational or streaming (refer 3GPP TS 24.008 [8] 
subclause 10.5.6.5). 

<Guaranteed bitrate UL> : a numeric parameter that indicates the guaranteed number of kbits/s delivered 
to UMTS (up-link traffic) at a SAP (provided that there is data to deliver). As an example a bitrate of 32kbit/s 
would be specified as '32' (e.g. AT+CGEQREQ=... ,32, ...). If the parameter is set to '0' the subscribed value will 
be requested. This parameter should be provided if the Traffic class is specified as conversational or streaming 
(refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Guaranteed bitrate DL>: a numeric parameter that indicates the guaranteed number of kbits/s delivered 
by UMTS (down-link traffic) at a SAP (provided that there is data to deliver). As an example a bitrate of 32kbit/s 
would be specified as '32' (e.g. AT+CGEQREQ=... , 32 , ...). If the parameter is set to '0' the subscribed value will 
be requested. This parameter should be provided if the Traffic class is specified as conversational or streaming 
(refer 3GPPTS 24.008 [8] subclause 10.5.6.5). 

<Del ivery order> : a numeric parameter that indicates whether the UMTS bearer shall provide in-sequence 
SDU delivery or not. 

no 

1 yes 

2 subscribed value. 
Other values are reserved. 

<Maximum SDU size>: a numeric parameter (1,2,3,...) that indicates the maximum allowed SDU size in octets. 
If the parameter is set to '0' the subscribed value will be requested (refer 3GPP TS 24.008 [8] 
subclause 10.5.6.5). 

<SDU error rat io> : a string parameter that indicates the target value for the fraction of SDUs lost or detected 
as erroneous. SDU error ratio is defined only for conforming traffic. The value is specified as 'mEe'. As an 
example a target SDU error ratio of 5«10'^ would be specified as "5E3" (e.g. AT+CGEQREQ=..., " 5E3 " , ...). 
"OEO" means subscribed value (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Res idual bit error rat io> : a string parameter that indicates the target value for the undetected bit error 
ratio in the delivered SDUs. If no error detection is requested, Residual bit error ratio indicates the bit error ratio 
in the delivered SDUs. The value is specified as "mEe". As an example a target residual bit error ratio of 5»10'^ 
would be specified as "5E3" (e.g. AT+CGEQREQ=..., " 5E3 " , ...). "OEO" means subscribed value (refer 
3GPPTS 24.008 [8] subclause 10.5.6.5). 

<Delivery of erroneous SDUs> : a numeric parameter that indicates whether SDUs detected as erroneous 
shall be delivered or not. 

no 

1 yes 

2 no detect 

3 subscribed value 
Other values are reserved. 
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<Transf er delay> : a numeric parameter (0,1,2,. ..) that indicates the targeted time between request to transfer 
an SDU at one SAP to its dehvery at the other SAP, in milliseconds. If the parameter is set to '0' the subscribed 
value will be requested (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Traffic handling priority>: a numeric parameter (1,2,3,...) that specifies the relative importance for 
handling of all SDUs belonging to the UMTS bearer compared to the SDUs of other bearers. If the parameter is 
set to '0' the subscribed value will be requested (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Source Statistics Descriptor> : a numeric parameter that specifies characteristics of the source of the 
submitted SDUs for a PDP context. This parameter should be provided if the Traffic class is specified as 
conversational or streaming (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

Characteristics of SDUs is unknown 

1 Characteristics of SDUs corresponds to a speech source 
Other values are reserved. 

<Signalling Indication>: a numeric parameter used to indicate signalling content of submitted SDUs for 
a PDP context. This parameter should be provided if the Traffic class is specified as interactive (refer 
3GPPTS 24.008 [8] subclause 10.5.6.5). 

PDP context is not optimized for signalling 

1 PDP context is optimized for signalling<PDP_type> (see +CGDCONT and +CGDSCONT connmands). 

If a value is omitted for a particular class then the value is considered to be unspecified. 

NOTE: When in dual mode with EPS the MT provides a mapping function to EPS Quality of Service parameter 
used for an EPS bearer resource activation request. 

Implementation 

Optional. If the command is not implemented then all the values are considered to be unspecified. 

10.1.7 3G Quality of Service Profile (Minimum acceptable) +CGEQMIN 



Table 117: +CGEQMIN parameter command syntax 



Command 


Possible Response(s) 


+CGEQMIN= [<cid> [ , <Traf f ic 

class> [, <Maximum bitrate UL> [, <Maxiniuni 

bitrate DL> [ , <Guaranteed bitrate 

UL> [ , <Guaranteed bitrate DL> [ , <Delivery 
order> [ , <Maximum SDU size>[,<SDU error 
ratio> [ , <Residual bit error 
ratio> [ , <Delivery of erroneous SDUs> 
[,<Transfer delay> [ , <Traf f ic handling 
priority> [ , <Source statistics 
descriptor> [ , <Signalling 
indication>] ]]]]]]]]]]]]]] 


OK 

ERROR 


+CGEQMIN? 


+CGEQMIN: <cid> , <Traf f ic 

class> , <Maximum bitrate UL> , <Maximum 

bitrate DL> , <Guaranteed bitrate 

UL> , <Guaranteed bitrate DL> , <Delivery 

order> , <Maximum SDU size>,<SDU error 

ratio , <Residual bit error 

ratio> , <Delivery of erroneous 

SDUs> , <Transf er delay> , <Traf f ic 

handling priority> , <Source statistics 

descriptor>, <Signalling indication> 

[<CR><LF>+CGEQMIN: <cid> , <Traf f ic 
class> , <Maxiniuni bitrate UL> , <Maxiniuni 
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Command 


Possible Response(s) 




bitrate DL> , <Guaranteed. bitrate 
UL> , <Guaranteed bitrate DL>, <Delivery 
ord.er> , <Maxiinuni SDU size>,<SDU error 
ratio , <Residual bit error 
ratio> , <Delivery of erroneous 
SDUs> , <Transf er d.elay> , <Traf f ic 
handling priority> , <Source statistics 
descriptor> , <Signalling indication> 

[...]] 


+CGEQMIN=? 


+CGEQMIN : <PDP_type> , (list of supported 

<Traffic class>s) , (list of supported <Maximum 
bitrate UL>s) , (list of supported <Maximum 
bitrate DL>s) , (Ust of supported <Guaranteed 
bitrate UL>s) , (list of supported <Guaranteed 
bitrate DL>s) , (list of supported <Delivery 
order>s) , (Ust of supported <Maximum SDU 
size>s) , (Ust of supported < SDU error 
ratio>s) , (Ust of supported < Re si dual bit 
error ratio>s) , (Ust of supported <Delivery of 
erroneous SDUs>s) , (Ust of supported <Transfer 
delay>s) , (Ust of supported <Traffic handling 
priority>s) , (Ust of supported < Source 
statistics descriptor>s) , ( Ust of supported 
<Signalling indication>s) 

[<CR><LF>+CGEQMIN: <PDP_type>, (Ust of 
supported <Traffic class>s) , (list of supported 
<Maximum bitrate UL>s) , (list of supported 
<Maximum bitrate DL>s) , (list of supported 
<Guaranteed bitrate UL>s) , (list of supported 
<Guaranteed bitrate DL>s) , (Ust of supported 
<Delivery order>s) , (list of supported <Maxiinuin 
SDU size>s) , (list of supported < SDU error 
ratios) , (list of supported < Re si dual bit 
error ratios) , (Ust of supported <Delivery of 
erroneous SDUs>s) , (list of supported <Transfer 

priority>s) , (Ust of supported < Source 
statistics descriptor>s) , ( list of supported 
<Signalling indication>s) 

[...]] 



Description 

TUis command allows tUe TE to specify a minimum acceptable profile, wbicb is cbecked by tbe MT against tbe 
negotiated profile returned in tbe PDP context establisbment and PDP contect modification procedures. 

The set command specifies a profile for the context identified by the (local) context identification parameter, <cid>. 
The specified profile will be stored in the MT and checked against the negotiated profile only at activation or MS- 
initiated modification of the related context. Since this is the same parameter that is used in the +CGDCONT and 
+ CGDSCONT commands, the +CGEQMIN command is effectively an extension to these commands. The QoS profile 
consists of a number of parameters, each of which may be set to a separate value. 

A special form of the set command, +CGEQMIN=<cid> causes the minimum acceptable profile for context number 
<cid> to become undefined. In this case no check is made against the negotiated profile. 
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The read command returns the current settings for each defined context. 

The test command returns values supported as a compound value. If the MT supports several PDP types, the parameter 
value ranges for each PDP type are returned on a separate line. 

Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition (see +CGDCONT and +CGDSCONT 
commands). 

The following parameters are defined in 3GPP TS 23.107 [46]: 

<PDP_type> : (see +CGDCONT and +CGDSCONT commands). 

<Traffic class>:a numeric parameter that indicates the type of apphcation for which the UMTS bearer 
service is optimised. 

conversational 

1 streaming 

2 interactive 

3 background 

Other values are reserved. 

<Maximum bitrate UL>: a numeric parameter that indicates the maximum number of kbits/s dehvered to 
UMTS (up-link traffic) at a SAP. As an example a bitrate of 32kbit/s would be specified as '32' (e.g. 
AT+CGEQMIN=... ,32, ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<MaximuTn bitrate DL> : a numeric parameter that indicates the maximum number of kbits/s delivered by 
UMTS (down-link traffic) at a SAP. As an example a bitrate of 32kbit/s would be specified as '32' (e.g. 
AT+CGEQMIN=..., 32 , ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Guaranteed bitrate UL>: a numeric parameter that indicates the guaranteed number of kbits/s delivered 
to UMTS (up-link traffic) at a SAP (provided that there is data to deUver). As an example a bitrate of 32kbit/s 
would be specified as '32' (e.g. AT+CGEQMIN=... ,32, ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Guaranteed bitrate DL>: a numeric parameter that indicates the guaranteed number of kbits/s delivered 
by UMTS (down-link traffic) at a SAP (provided that there is data to deliver). As an example a bitrate of 32kbit/s 
would be specified as '32' (e.g. AT+CGEQMIN=..., 32 , ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Delivery order> : a numeric parameter that indicates whether the UMTS bearer shall provide in-sequence 
SDU deUvery or not. 

no 

1 yes 

Other values are reserved. 

<Maximum SDU size>: a numeric parameter (1,2,3,...) that indicates the maximum allowed SDU size in octets 
(refer 3GPPTS 24.008 [8] subclause 10.5.6.5). 

<SDU error ratio>: a string parameter that indicates the target value for the fraction of SDUs lost or detected 
as erroneous. SDU error ratio is defined only for conforming traffic. The value is specified as "mEe". As an 
example a target SDU error ratio of 5«10''' would be specified as "5E3" (e.g. AT+CGEQMIN=..., " 5E3 " , ...) 
(refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Residual bit error ratio> : a string parameter that indicates the target value for the undetected bit error 
ratio in the delivered SDUs. If no error detection is requested. Residual bit error ratio indicates the bit error ratio 
in the delivered SDUs. The value is specified as "mEe". As an example a target residual bit error ratio of 5*10"^ 
would be specified as "5E3" (e.g. AT+CGEQMIN=..., " 5E3 " , ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 



ETSI 



3GPP TS 27.007 version 10.5.0 Release 10 



190 



ETSI TS 127 007 VI 0.5.0 (2011-10) 



<Delivery of erroneous SDUs> : a numeric parameter that indicates whether SDUs detected as erroneous 
shall be delivered or not. 

no 

1 yes 

2 no detect 

Other values are reserved. 

<Transf er delay > : a numeric parameter (0,1,2,.. .) that indicates the targeted time between request to transfer 
an SDU at one SAP to its dehvery at the other SAP, in milliseconds (refer 3GPP TS 24.008 [8] 
subclause 10.5.6.5). 

<Traffic handling priority>: a numeric parameter (1,2,3,...) that specifies the relative importance for 
handling of all SDUs belonging to the UMTS bearer compared to the SDUs of other bearers (refer 
3GPPTS 24.008 [8] subclause 10.5.6.5). 

<Source Statistics Descriptor>: a numeric parameter that specifies characteristics of the source of the 
submitted SDUs for a PDP context. This parameter should be provided if the Traffic class is specified as 
conversational or streaming (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

Characteristics of SDUs is unknown 

1 Characteristics of SDUs corresponds to a speech source 
Other values are reserved. 

<Signalling Indication> : a numeric parameter used to indicate signalling content of submitted SDUs for 
a PDP context. This parameter should be provided if the Traffic class is specified as interactive (refer 
3GPPTS 24.008 [8] subclause 10.5.6.5). 

PDP context is not optimized for signalling 

1 PDP context is optimized for signalling 

If a value is omitted for a particular class then the value is considered to be unspecified. 
Implementation 

Optional. If the command is not implemented then no check is made against the negotiated profile. 
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1 0.1 .8 3G Quality of Service Profile (Negotiated) +CGEQNEG 



Table 118: +CGEQNEG action command syntax 



Command 


Possible Response(s) 


+CGEQNEG= [<cid> [ , <cid> [,...]]] 


+CGEQNEG: <cid> , <Traf f ic 

class> , <Maxiniuni bitrate UL>, <Maxiniuni 

bitrate DL> , <Guaranteed bitrate 

UL> , <Guaranteed bitrate DL> , <Delivery 

order> , <Maximum SDU size>,<SDU error 

ratio , <Residual bit error 

ratio> , <Delivery of erroneous 

SDUs> , <Transf er delay> , <Traf f ic 

handling priority> 

L<CR><LF>+CGEQNEG : <Cld>, <TratriC 

class> , <Maximum bitrate UL> , <Maximum 

bitrate DL> , <Guaranteed bitrate 

UL> , <Guaranteed bitrate DL> , <Delivery 

order> , <Maxiniuni SDU size>,<SDU error 

ratio , <Residual bit error 

ratio> , <Delivery of erroneous 

SDUs> , <Transf er delay> , <Traf f ic 

handling priority> 

[...]] 


+CGEQNEG=? 


+CGEQNEG : (list of <cid>s associated with active 
contexts ) 



Description 

This command allows the TE to retrieve the negotiated QoS profiles returned in the PDP context estabUshment 

procedure. 

The execution command returns the negotiated QoS profile for the specified context identifiers, <cid>s. The QoS 
profile consists of a number of parameters, each of which may have a separate value. 

The test command returns a list of <cid>s associated with active contexts. 

Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition (see +CGDCONT and +CGDSCONT 

commands). 

The following parameters are defined in 3GPP TS 23.107 [46]: 

<Traf f ic class > : a numeric parameter that indicates the type of appUcation for which the UMTS bearer 

service is optimised. 

conversational 

1 streaming 

2 interactive 

3 background 

Other values are reserved. 

<Maximum bitrate UL> : a numeric parameter that indicates the maximum number of kbits/s deUvered to 
UMTS (up-link traffic) at a SAP. As an example a bitrate of 32kbit/s would be specified as '32' (e.g. 
+CGEQNEG : ... , 3 2 , ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 
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<Maximum bitrate DL> : a numeric parameter that indicates the maximum number of kbits/s delivered by 
UMTS (down-link traffic) at a SAP As an example a bitrate of 32kbit/s would be specified as '32' (e.g. 
+CGEQNEG : 32 , ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Guaranteed bitrate UL> : a numeric parameter that indicates the guaranteed number of kbits/s delivered 
to UMTS (up-link traffic) at a SAP (provided that there is data to deliver). As an example a bitrate of 32kbit/s 
would be specified as '32' (e.g. +CGEQNEG : 32 , ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Guaranteed bitrate DL> : a numeric parameter that indicates the guaranteed number of kbits/s delivered 
by UMTS (down-link traffic) at a SAP (provided that there is data to deliver). As an example a bitrate of 32kbit/s 
would be specified as '32' (e.g. +CGEQNEG : 32 , ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Del ivery order > : a numeric parameter that indicates whether the UMTS bearer shall provide in-sequence 
SDU delivery or not. 

no 

1 yes 

Other values are reserved. 

<Maximum SDU size>: a numeric parameter that (1,2,3,...) indicates the maximum allowed SDU size in octets 
(refer 3GPPTS 24.008 [8] subclause 10.5.6.5). 

<SDU error ratio> : a string parameter that indicates the target value for the fraction of SDUs lost or detected 
as erroneous. SDU error ratio is defined only for conforming traffic. The value is specified as "mEe". As an 
example a target SDU error ratio of 5*10"^ would be specified as "5E3" (e.g. +CGEQNEG : " 5E3 " , ...) (refer 
3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Residual bit error ratio> : a string parameter that indicates the target value for the undetected bit error 
ratio in the delivered SDUs. If no error detection is requested. Residual bit error ratio indicates the bit error ratio 
in the delivered SDUs. The value is specified as "mEe". As an example a target residual bit error ratio of 5*10'^ 
would be specified as "5E3" (e.g. +CGEQNEG : " 5E3 " , ...) (refer 3GPP TS 24.008 [8] subclause 10.5.6.5). 

<Delivery of erroneous SDUs> : a numeric parameter that indicates whether SDUs detected as erroneous 
shall be delivered or not. 

no 

1 yes 

2 no detect 

Other values are reserved. 

<Transf er delay> : a numeric parameter (0,1,2,. . .) that indicates the targeted time between request to transfer 
an SDU at one SAP to its delivery at the other SAP, in milliseconds (refer 3GPP TS 24.008 [8] 
subclause 10.5.6.5). 

<Traffic handling priority>: a numeric parameter (1,2,3,...) that specifies the relative importance for 
handling of all SDUs belonging to the UMTS bearer compared to the SDUs of other bearers (refer 
3GPPTS 24.008 [8] subclause 10.5.6.5). 

If a value is omitted for a particular class then the value is considered to be imspecified. 

Implementation 

Optional. 
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1 0.1 .9 PS attach or detach +CGATT 

Table 119: +CGATT parameter command syntax 



Command 


Possible Response(s) 


+CGATT= [<state>] 


OK 

ERROR 


+CGATT? 


+CGATT: <state> 


+CGATT=? 


+ CGATT : ( list of supported <state>s) 



Description 

The execution command is used to attach the MT to, or detach the MT from, the Packet Domain service. After the 
command has completed, the MT remains in V.250 command state. If the MT is already in the requested state, the 

command is ignored and the OK response is returned. If the requested state cannot be achieved, an ERROR or 
+CME ERROR response is returned. Extended error responses are enabled by the +CMEE command. 

Any active PDP contexts wiU be automatically deactivated when the attachment state changes to detached. 

The read command retums the current Packet Domain service state. 

The test command is used for requesting information on the supported Packet Domain service states. 

NOTE: This command has the characteristics of both the V.250 action and parameter commands. Hence it has the 
read form in addition to the execution/set and test forms. 

Defined Values 

<state>: : a numeric parameter that indicates the state of PS attachment 

detached 

1 attached 

Other values are reserved and will result in an ERROR response to the execution command. 
Implementation 
Optional. 

10.1.10 PDP context activate or deactivate +CGACT 



Table 120: +CGACT parameter command syntax 



Command 


Possible Response(s) 


+CGACT= [<state> [ , <cid> [ , <cid> [,...]]]] 


OK 

ERROR 

+CME ERROR: <err> 


+CGACT? 


+CGACT: <cid> , <state> 
[<CR><LF>+CGACT: <cid> , <state> 

[...]] 


+CGACT=? 


+CGACT : (hst of supported <state>s) 



Description 

The execution command is used to activate or deactivate the specified PDP context (s). After the command has 
completed, the MT remains in V.250 command state. If any PDP context is already in the requested state, the state for 
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that context remains unchanged. If the requested state for any specified context cannot be achieved, an ERROR or +CME 
ERROR response is returned. Extended error responses are enabled by the +CMEE command. If the MT is not PS 
attached when the activation form of the command is executed, the MT first performs a PS attach and then attempts to 
activate the specified contexts. If the attach fails then the MT responds with ERROR or, if extended error responses are 
enabled, with the appropriate failure-to-attach error message. 

For EPS, if an attempt is made to disconnect the last PDN connection, then the MT responds with ERROR or, if 
extended error responses are enabled, a +CME ERROR. 

For EPS, the activation request for an EPS bearer resource will be answered by the network by either an EPS dedicated 
bearer activation or EPS bearer modification request. The request must be accepted by the MT before the PDP context 

can be set in to established state. 

If no <cid>s are specified the activation form of the command activates all defined contexts. 

If no <cid>s are specified the deactivation form of the command deactivates all active contexts. 

The read command retums the current activation states for all the defined PDP contexts. 

The test command is used for requesting information on the supported PDP context activation states. 

NOTE. This command has the characteristics of both the V.250 action and parameter commands. Hence it has the 
read form in addition to the execution/set and test forms. 

Defined Values 

<state>: a numeric parameter that indicates the state of PDP context activation 

deactivated 

1 activated 

Other values are reserved and will result in an ERROR response to the execution command. 

<cid>: a numeric parameter which specifies a particular PDP context definition (see the +CGDCONT and 
+CGDSCONT commands). 

Implementation 

Optional. 

10.1.11 PDP Context Modify +CGCMOD 



Table 121: +CGCMOD action command syntax 



Command 


Possible Response(s) 


+CGCMOD= [<cid> [ , <cid> [,...]]] 


OK 

ERROR 


+CGCMOD=? 


+ CGCMOD : (Ustof<cid>s associated with active 
contexts) 



Description 

The execution command is used to modify the specified PDP context (s) with repect to QoS profiles and TFTs. After 
the command has completed, the MT returns to V.250 online data state. If the requested modification for any specified 
context cannot be achieved, an ERROR or +CME ERROR response is returned. Extended error responses are enabled by 
the +CMEE command. 

For EPS, the modification request for an EPS bearer resource will be answered by the network by an EPS bearer 
modification request. The request must be accepted by the MT before the PDP context is effectively changed. 

If no <cid>s are specified the activation form of the command modifies all active contexts. 
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The test command returns a list of <cid>s associated with active contexts. 
Defined Values 

<cid>: a numeric parameter which specifies a particular PDP context definition (see the +CGDCONT and 
+CGDSCONT commands). 

Implementation 

Optional. 

10.1.12 Enter data State +CGDATA 



Table 122: +CGDATA action command syntax 



Command 


Possible Response(s) 


+CGDATA= [<L2P> [,<cid> [,<cid> [,...]]]] 


CONNECT 
ERROR 


+CGDATA=? 


+CGDATA : (list of supported <L2P>s) 



Description 

The execution command causes the MT to perform whatever actions are necessary to establish communication between 
the TE and the network using one or more Packet Domain PDP types. This may include performing a PS attach and one 
or more PDP context activations. If the <L2P> parameter value is unacceptable to the MT, the MT shall return an 
ERROR or +CME ERROR response. Otherwise, the MT issues the intermediate result code CONNECT and enters V.250 
onhne data state. 

Commands following +CGDATA command in the AT command line shall not be processed by the MT. 

The detailed behaviour after the online data state has been entered is dependent on the PDP type. It is described briefly 
in 3GPP TS 27.060 [34] and in more detail in 3GPP TS 29.061 [39] and the specifications for the relevant PDPs. PS 
attachment and PDP context activation procedures may take place prior to or during the PDP startup if they have not 
already been performed using the +CGATT and +CGACT commands. 

If context activation takes place during the PDP startup, one or more <cid>s may be specified in order to provide the 
information needed for the context activation request(s). 

During each PDP startup procedure the MT may have access to some or all of the following information - 
The MT may have a priori knowledge, for example, it may implement only one PDP type. 
The command may have provided an <L2P> parameter value. 

The TE may provide a PDP type and/or PDP address to the MT during in the PDP startup procedure. 
If any of this information is in conflict, the command will fail. 

Any PDP type and/or PDP address present in the above information shall be compared with the PDP type and/or PDP 
address in any context definitions specified in the command in the order in which their <cid>s appear. For a context 
definition to match - 

The PDP type must match exactly. 

The PDP addresses are considered to match if they are identical or if either or both addresses are unspecified. 
For example, a PPP NCP request specifying PDP type = IP and no PDP address would cause the MT to search 
through the specified context definitions for one with PDP type = IP and any PDP address. 

The context shall be activated using the matched value for PDP type and a static PDP address if available, together with 
the other information found in the PDP context definition. If a static PDP address is not available then a dynamic 
address is requested. 
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If no <cid> is given or if there is no matching context definition, the MT shall attempt to activate the context with 
whatever information is available to the MT. The other context parameters shall be set to their default values. 

If the activation is successful, data transfer may proceed. 

After data transfer is complete, and the layer 2 protocol termination procedure has completed successfully, the V.250 
command state is re-entered and the MT returns the final result code OK. 

In the event of an erroneous termination or a failure to start up, the V.250 command state is re-entered and the MT 
returns the final result code NO CARRIER or, if enabled, +CiyiE ERROR. Attach, activate and other errors may be 
reported. 

The test command is used for requesting information on the supported layer 2 protocols. 
This command may be used in both normal and modem compatibility modes. 
Defined Values 

<L2 P>: a string parameter that indicates the layer 2 protocol to be used between the TE and MT 
NULL none, for PDP type OSP:IHOSS (Obsolete) 
PPP Point-to-point protocol for a PDP such as IP 

PAD character stream for X.25 character (triple X PAD) mode (Obsolete) 
X25 X.25 L2 (LAPB) for X.25 packet mode (Obsolete) 

M-xxxx manufacturer- specific protocol (xxxx is an alphanumeric string) 

If the value is omitted, the layer 2 protocol is unspecified. Other values are reserved and will result in an ERROR 
response. 

<cid>: a numeric parameter which specifies a particular PDP context definition (see the +CGDCONT and 
+CGDSCONT commands). 

Implementation 

Optional if the D (dial) command can be used to specify Packet Domain operation. 
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1 0.1 .1 3 Configure local Octet Stream PAD parameters +CGCLOSP 
(Obsolete) 

10.1.14 Show FDR address(es) +CGPADDR 



Table 123: +CGPADDR action command syntax 



Command 


Possible response(s) 


+CGPADDR= [<cid> [ , <cid> 
[,...]]] 


+CGPADDR: <cid>[,<PDP addr 1>[,<PDP add 

r_2>] ] 

[<CR><LF>+CGPADDR: <cid>, [<PDP_addr_l> [ 

, <PDP addr 2>] ] 

[...]] 


+CGPADDR=? 


+ CGPADDR : ( list of defined < c i d >s ) 



Description 

The execution command returns a list of PDP addresses for the specified context identifiers. 
The test command returns a list of defined <cid>s. 
Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition (see the +CGDCONT and 
+CGDSCONT commands). If no <cid> is specified, the addresses for all defined contexts are returned. 

<PDP_addr_l> and <PDP_addr_2 >: each is a string that identifies the MT in the address space applicable to 
the PDP. The address may be static or dynamic. For a static address, it will be the one set by the +CGDCONT and 
+CGDSCONT commands when the context was defined. For a dynamic address it will be the one assigned during 
the last PDP context activation that used the context definition referred to by <cid>. Both <PDP_addr_l> 
and < PDP_addr_2 >are omitted if none is available. Both < PDP_addr_l > and < PDP_addr_2 > are 
included when both IPv4 and IPv6 addresses are assigned, with <PDP_addr_l> containing the IPv4 address 
and < PDP_addr_2 > containing the IPv6 address. 

The string is given as dot-separated numeric (0-255) parameter of the form: 
al.a2.a3.a4 for IPv4 and 

al.a2.a3.a4.a5.a6.a7.a8.a9.al0.all.al2.al3.al4.al5.al6for IPv6. 

When +CGPIAF is supported, it"s settings can influence the format of the IPv6 address in parameter 
<PDP_addr_l> or <PDP_addr_2> returned with the execute form of + CGPADDR. 

NOTE: In dual-stack terminals (<PDP_type> IPV4V6), the IPv6 address will be provided in <PDP_addr_2 >. 

For terminals with a single IPv6 stack (<PDP_type> IPV6) or due to backwards compatibility, the IPv6 
address can be provided in parameter <PDP_addr_l>. 

Implementation 

Optional. 

1 0.1 .1 5 Automatic response to a network request for PDP context activation 
+CGAUTO 

Table 124: +CGAUTO parameter command syntax 



Command 


Possible response(s) 


+CGAUTO= [<n>] 


OK 

ERROR 
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+CGAUTO? 


+CGAUTO: <n> 


+CGAUTO=? 


+CGAUTO : (list of supported <n>s) 



Description 

The set command disables or enables an automatic positive or negative response (auto-answer) to the receipt of a NW- 
initiated Request PDP Context Activation message from the network in UMTS/GPRS and a NW-initiated Request EPS 
Bearer Activation/ Modification Request messages in EPS. It also provides control over the use of the V.250 basic 
commands 'SO', 'A' and 'H' for handling network requests for PDP context activation. The setting does not affect the 
issuing of the unsolicited result code RING or +CRING. 

The test command returns the values of <n> supported by the MX as a compound value. 

When the +CGAUTO=0 command is received, the MT shall not perform a PS detach if it is attached. Subsequently, 
when the MT announces a network request for PDP context activation by issuing the unsolicited result code RING or 
+CRING, the TE may manually accept or reject the request by issuing the +CGANS command or may simply ignore the 
network request. 

When the +CGAUT0=1 command is received, the MT shall attempt to perform a PS attach if it is not already attached. 
Failure will result in ERROR or, if enabled, +CME ERROR being retmned to the TE. Subsequently, when the MT 
announces a network request for PDP context activation by issuing the unsolicited result code RING or +CRING to the 
TE, this is followed by the intermediate result code CONNECT. The MT then enters V.250 online data state and follows 
the same procedure as it would after having received a +CGANS=1 with no <L2P> or <cid> values specified. 

Defined values 



<n>: a numeric parameter 

turn off automatic response for Packet Domain only 

1 turn on automatic response for Packet Domain only 

2 modem compatibility mode. Packet Domain only 

3 modem compatibility mode. Packet Domain and circuit switched calls 

4 turn on automatic negative response for Packet Domain only 

For <n> = Packet Domain network requests are manually accepted or rejected by the +CGANS command. 

For <n> = 1 Packet Domain network requests are automatically accepted according to the description above. 

For <n> = 2, automatic acceptance of Packet Domain network requests is controlled by the 'SO' command. Manual 
control uses the 'A' and 'H' commands, respectively, to accept and reject Packet Domain requests. (+CGANS may also be 
used.) Incoming circuit switched calls can be neither manually nor automatically answered. 

For <n> = 3, automatic acceptance of both Packet Domain network requests and incoming circuit switched calls is 
controlled by the 'SO' command. Manual control uses the 'A' and 'H' commands, respectively, lo accept and reject Packet 
Domain requests. (+CGANS may also be used.) Circuit switched calls are handled as described elsewhere in this 
specification. 

For <n> = 4, Packet Domain network requests are automatically rejected. 
Implementation 

Optional. If not implemented, the MT shall behave according to the case of <n> = 3. 
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10.1 .16 Manual response to a network request for PDP context activation 
+CGANS 

Table 125: +CGANS action command syntax 



Command 


Possible response(s) 


+CGANS= [<response>, [<L2P> 
, [<cid>] ] ] 


OK 

ERROR 


+CGANS=? 


+CGANS : (list of supported 
<response>s) , (list of supported <L2P>s) 



Description 

The execution command requests the MT to respond to a network request for Packet Domain PDP context activation 
which has been signalled to the TE by the RING, +CRING or +CGEV unsoUcited result code. The <response> 
parameter allows the TE to accept or reject the request. 

If <response> is 0, the request is rejected and the MT returns OK to the TE. 
If < response > is I, the following procedure is followed by the MT. 

Commands following the +CGANS command in the AT command line shall not be processed by the MT. 

If the <L2P> parameter value is unacceptable to the MT, the MT shall return an ERROR or +CME ERROR response. 
Otherwise, the MT issues the intermediate result code CONNECT and enters V.250 onUne data state. 

The detailed behaviour after the online data state has been entered is dependent on the PDP type. It is described briefly 
in 3GPP TS 27.060 [34] and in more detail in 3GPP TS 29.061 [39] and the specifications for the relevant PDPs. PDP 
context activation procedures shall take place prior to or during the PDP startup. 

One or more <cid>s may be specified in order to provide the values needed for the context activation request. 

During the PDP startup procedure the MT has the PDP type and the PDP address provided by the network in the 
Request PDP Context Activation message. The MT may also have some or all of the following information - 

The MT may have a priori knowledge, for example, it may implement only one PDP type. 

The command may have provided an <L2P> parameter value. 

The TE may provide one or both of PDP type and PDP address to the MT in the PDP startup. 
If any of this information is in conflict, the command will fail. 

If one or more <cid> is given then an attempt shall be made to identify an appropriate context definition by matching 
the PDP type and PDP address in the network request with the PDP type and PDP address in each of the specified 
context definitions (in the order in which their <cid>s appear in the conmiand) as follows: 

The PDP type must match exactly. 

The PDP addresses are considered to match if they are identical or if the address in the context definition is 
imspecified. 

The context shall be activated using the values for PDP type and PDP address provided by the network, together with 
the other information found in the PDP context definition. An APN may or may not re required, depending on the 
application. 

If no <cid> is given or if there is no matching context definition, the MT will attempt to activate the context using the 
values for PDP type and PDP address provided by the network, together with any other relevant information known to 
the MT. The other context parameters will be set to their default values. 

If the activation is successful, data transfer may proceed. 
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After data transfer is complete, and the layer 2 protocol termination procedure has completed successfully, the V.250 
command state is re-entered and the MT returns the final result code OK 

In the event of an erroneous termination or a failure to startup, the V.250 command state is re-entered and the MT 
returns the final result code NO CARRIER or, if enabled, +CiyiE ERROR. Attach, activate and other errors may be 
reported. It is also an error to issue the +CGANS command when there is no outstanding network request. 

NOTE: This is not the same as if the MT issues a +CGDATA (or +CGACT) command after receiving a +CRING 
unsolicited result code. A +CGDATA (or +CGACT) does not command the MT to acknowledge the 
network request but rather to make a new request for context activation. The network request would be 
ignored. 

The test command returns the values of <response> and <L2P> supported by the MT as compoimd values. 
This command may be used in both normal and modem compatibility modes. 
Defined values 

<response>: is a numeric parameter which specifies how the request should be responded to. 

reject the request 

1 accept and request that the PDP context be activated 

If <response> is omitted it is assumed to be 0. Other values are reserved and will result in the ERROR response. 

<L2P>: a string parameter which indicates the layer 2 protocol to be used (see +CGDATA command). 

<cid>: a numeric parameter which specifies a particular PDP context definition (see the +CGDCONT and 
+CGDSCONT commands). 

Implementation 

Optional. 

10.1.17 GPRS mobile station class +CGCLASS 



Table 126: +CGCLASS parameter command syntax 



Command 


Possible Response(s) 


+CGCLASS= [<class>] 


OK 

ERROR 


+CGCLASS? 


+CGCLASS: <class> 


+CGCLASS=? 


+CGCLASS : (list of supported <class>s) 



Description 

The set command is used to set the MT to operate according to the specified mode of operation, see 

3GPP TS 23.060 [47]. If the requested mode of operation is not supported, an ERROR or +CME ERROR response is 

returned. Extended error responses are enabled by the +CMEE command. 

The read command returns the mode of operation set by the TE, independent of the current serving cell capability and 
independent of the current serving cell Access Technology. If no value has been set by the TE previously, the return 
value shall be the highest mode of operation that can be supported by the MT. 

The test command is used for requesting information on the supported MT mode of operation. 

Defined Values 

<class>:a string parameter which indicates the mode of operation 
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A Class-A mode of operation (A/Gb mode), or CS/PS mode of operation (lu mode) (highest mode of 

operation) 

B Class-B mode of operation (A/Gb mode), or CS/PS mode of operation (lu mode) 

CG Class-C mode of operation in PS only mode (A/Gb mode), or PS mode of operation (lu mode) 

CC Class-C mode of operation in CS only mode (A/Gb mode), or CS (lu mode) (lowest mode of operation) 

NOTE: <class> A means that the MT would operate simultaneous PS and CS service 

<class>B means that the MT would operate PS and CS services but not simultaneously in A/Gb mode 
<class> CG means that the MT would only operate PS services 
<class> CC means that the MT would only operate CS services 

Other values are reserved and will result in an ERROR response to the set command. 

If the MT is attached to the PS domain when the set command is issued with a<class> = CC specified, a PS detach 
shall be performed by the MT. 

Implementation 

Optional. 

10.1.18 Configure local triple-X PAD parameters +CGCLPAD (GPRS only) 
(Obsolete) 

10.1.19 Packet Domain event reporting +CGEREP 



Table 127: +GGEREP parameter command syntax 



Command 


Possible response(s) 


+CGEREP= [<mode> [ , <bf r>] ] 


OK 

ERROR 


+CGEREP? 


+CGEREP: <mode>,<bfr> 


+CGEREP=? 


+CGEREP : (list of supported <mode>s) , (hst of supported 

<bf r>s) 



Description 

Set command enables or disables sending of unsolicited result codes, +CGEV : XXX from MT to TE in the case of 
certain events occurring in the Packet Domain MT or the network. <inode> controls the processing of unsolicited result 
codes specified within this command. <bf r> controls the effect on buffered codes when <niode> 1 or 2 is entered. If a 
setting is not supported by the MT, ERROR or +CME ERROR : is returned. 

Read conmiand returns the current mode and buffer settings 

Test command returns the modes and buffer settings supported by the MT as compound values. 
Defined values 

<mode>: a numeric parameter 

buffer unsolicited result codes in the MT; if MT result code buffer is full, the oldest ones can be discarded. 
No codes are forwarded to the TE. 

1 discard unsolicited result codes when MT-TE Unk is reserved (e.g. in on-Une data mode); otherwise forward 
them directly to the TE 

2 buffer unsolicited result codes in the MT when MT-TE link is reserved (e.g. in on-line data mode) and flush 
them to the TE when MT-TE link becomes available; otherwise forward them directly to the TE 
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<bf r>: a numeric parameter 

MT buffer of unsolicited result codes defined within this command is cleared when <mode> 1 or 2 is entered 

1 MT buffer of unsolicited result codes defined within this command is flushed to the TE when <mode> 1 or 2 
is entered (OK response shall be given before flushing the codes) 

Defined events 

The events are vahd for GPRS/UMTS and LTE unless explicitly mentioned. 

For network attachment, the following unsolicited result codes and the corresponding events are defined: 

+CGEV: NW DETACH 

The network has forced a PS detach. This implies that all active contexts have been deactivated. These are not 
reported separately. 

+CGEV: ME DETACH 

The mobile termination has forced a PS detach. This implies that all active contexts have been deactivated. 
These are not reported separately. 

For MT class, the following unsoUcited result codes and the corresponding events are defined: 

+CGEV: NW CLASS <class> 

The network has forced a change of MT class. The highest available class is reported (see +CGCLASS). The 
format of the parameter <class>is found in command +CGCLASS. 

+CGEV: ME CLASS <class> 

The mobile termination has forced a change of MT class. The highest available class is reported (see 
+CGCLASS). The format of the parameter <class> is found in command +CGCLASS. 

For PDP context activation, the following unsolicited result codes and the corresponding events are defined: 

+CGEV: NW PDN ACT <cid> 

The network has activated a context. The context represents a Primary PDP context in GSM/UMTS. The <cid> for 
this context is provided to the TE. The format of the parameter <cid> is found in command +CGDCONT. 

NOTE 1: This event is not applicable for EPS. 

+CGEV: ME PDN ACT <cid> [ , <reason> [ , <cid_other >] ] 

The mobile termination has activated a context. The context represents a PDN connection in LTE or a Primary 
PDP context in GSM/UMTS. The <cid> for this context is provided to the TE. This event is sent either in result 
of expUcit context activation request (+CGACT), or in result of implicit context activation request associated to 
attach request (+CGATT=1). The format of the parameters <cid> , <cid_other> are found in command 
+ CGDCONT. 

<reason> integer type parameter indicates the reason why the context activation request for PDP type lPv4v6 was 
not granted. This parameter is only included if the requested PDP type associated with <cid> is IPv4v6, and the 
PDP type assigned by the network for <cid> is either IPv4 or IPv6. 

IPv4 only allowed 

1 IPv6 only allowed 

2 single address bearers only allowed. 

3 single address bearers only allowed and MT initiated context activation for a second address type bearer was 
not successful. 
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<cid_other> indicates the context identifier allocated by MT for an MT initiated context of a second address 
type. MT shall only include this parameter if <reason> parameter indicates single address bearers only 
allowed, and MT supports MT initiated context activation of a second address type without additional commands 
from TE, and MT has activated the PDN connection or PDP context associated with <cid_other>. 

NOTE lA: For legacy TEs supporting MT initiated context activation without TE requests, there is also a 
subsequent event +CGEV: ME PDN ACT <cid_other> returned to TE. 

+CGEV: NW ACT <p_cid>, <cid>, <event_type> 

The network has activated a context. The <cid> for this context is provided to the TE in addition to the 
associated primary <p_cid>. The format of the parameters <p_cid> and <cid> are found in command 
+CGDSCONT. 

<event_type> integer type parameter indicates whether this is an informational event or whether the TE has to 
acknowledge it. 

Informational event 

1 Information request: Acknowledgement required. The acknowledgement can be accept or reject, see 
+CGANS. 

+CGEV: ME ACT <p_cid>, <cid>, <event_type> 

The network has responded to an ME initiated context activation. The <cid> for this context is provided to the 
TE in addition to the associated primary <p_cid>. The format of the parameters <p_cid> and <cid> are 
found in command +CGDSCONT. The format of the parameter <event_type> is defined above. 

For PDP context deactivation, the following unsolicited result codes and the corresponding events are defined: 

+CGEV: NW DEACT <PDP_type>, <PDP_addr>, [<cid>] 

The network has forced a context deactivation. The <cid> that was used to activate the context is provided if 
known to the MT. The format of the parameters <PDP_type>, <PDP_addr> and <cid> are found in 
cormnand +CGDCONT. 

+CGEV: ME DEACT <PDP_type>, <PDP_addr>, [<cid>] 

The mobile termination has forced a context deactivation. The <cid> that was used to activate the context is 
provided if known to the MT. The format of the parameters <PDP_type>, <PDP_addr> and <cid> are 
found in command +CGDCONT. 

+CGEV: NW PDN DEACT <cid> 

The network has deactivated a context. The context represents a PDN connection in LTE or a Primary PDP context 
in GSM/UMTS. The associated <cid> for this context is provided to the TE. The format of the parameter <cid> is 
found in conmiand +CGDCONT. 

NOTE 2: Occurrence of this event replaces usage of the event 

+CGEV: NW DEACT <PDP_type>, <PDP_addr>, [<cid>] . 

+CGEV: ME PDN DEACT <cid> 

The mobile termination has deactivated a context. The context represents a PDN connection in LTE or a Primary 
PDP context in GSM/UMTS. The <cid> for this context is provided to the TE. The format of the parameter 
<cid> is found in command +CGDCONT. 

NOTE 3: Occurrence of this event replaces usage of the event 

+CGEV: ME DEACT <PDP_type>, <PDP_addr>, [<cid>] . 
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+CGEV: NW DEACT <p_cid>, <cid>, <event_type> 

The network has deactivated a context. The <cid> for this context is provided to the TE in addition to the 
associated primary <p_cid>. The format of the parameters <p_cid> and <cid> are found in command 
+CGDSCONT. The format of the parameter <event_type> is defined above. 

NOTE 4: Occurrence of this event replaces usage of the event 

+CGEV: NW DEACT <PDP_type>, <PDP_addr>, [<cid>] . 

+CGEV: ME DEACT <p_cid>, <cid>, <event_type> 

The network has responded to an ME initiated context deactivation request. The associated <cid> is provided 
to the TE in addition to the associated primary <p_cid>. The format of the parameters <p_cid> and <cid> 
are found in connmand +CGDSCONT. The format of the parameter <event_type> is defined above. 

NOTE 5: Occurrence of this event replaces usage of the event 

+CGEV: ME DEACT <PDP_type>, <PDP_addr>, [<cid>] . 

For PDP context modification, the following unsolicited result codes and the corresponding events are defined: 
+CGEV: NW MODIFY <cid>, <change_reason> , <event_type> 

The network has modifieda context. The associated <cid> is provided to the TE in addition to the 

<change_reason> and <event_type>. The format of the parameter <cid> is found in command 
+CGDCONT or +CGDSCONT. The format of the parameters <change_reason> and <event_type> are 
defined above. 

<change_reason> integer type parameter indicates what kind of change occurred. 

1 TFT only changed 

2 Qos only changed 

3 Both TFT and QoS changed 

+CGEV: ME MODIFY <cid>, <change_reason> , <event_type> 

The mobile termination has modified a context. The associated <cid> is provided to the TE in addition to the 

<change_reason> and <event_type>. The format of the parameter <cid> is found in command 
+CGDCONT or +CGDSCONT. The format of the parameters <change_reason> and <event_type> are 
defined above. 

For other PDP context handling, the following unsoUcited result codes and the corresponding events are defined: 
+CGEV: REJECT <PDP_type>, <PDP_addr> 

A network request for context activation occurred when the MT was unable to report it to the TE with a +CRING 
unsolicited result code and was automatically rejected. The format of the parameters <PDP_type> and 
<PDP_addr> are found in command +CGDCONT. 

NOTE 6: This event is not applicable for EPS. 

+CGEV: NW REACT <PDP_type>, <PDP_addr>, [<cid>] 

The network has requested a context reactivation. The <cid> that was used to reactivate the context is provided 
if known to the MT. The format of the parameters <PDP_type>, <PDP_addr> and <cid> are foimd in 
connmand +CGDCONT. 

NOTE 7: This event is not applicable for EPS. 

Implementation 

Optional. 
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10.1 .20 GPRS network registration status +CGREG 



Table 128: +CGREG parameter command syntax 



Command 


Possible response(s) 


+ CGREG= [<n>] 


+CME ERROR: <err> 


+CGREG? 


+CGREG : <n>,<stat>[,<lac>,<ci>[, <AcT> , <rac>] ] 


+CGREG=? 


+ CGREG : { list of supported < n > s ) 



Description 

The set command controls the presentation of an unsolicited result code + CGREG : < stat > when <n>=l and there is 
a change in the MT's GPRS network registration status in GERAN/UTRAN, or unsolicited result code 
+CGREG : <stat>[,<lac>,<ci>[, <AcT> , <rac>] ] when <n>=2 and there is a change of the network cell in 
GERAN/UTRAN; in this latest case <AcT>, <lac>, <rac> and <ci> are sent only if available. 

NOTE 1. If the GPRS MT also supports circuit mode services in GERAN/UTRAN and/or EPS services in E- 

UTRAN, the +CREG command and +CREG: result codes and/or the +CEREG command and +CEREG : 
result codes apply to the registration status and location information for those services. 

The read command returns the status of result code presentation and an integer <stat> which shows whether the 
network has currently indicated the registration of the MT. Location information elements <lac>, <ci>, <AcT> and 
<rac>, if available, are returned only when <n>=2 and MT is registered in the network. 

Defined values 

<n>: a numeric parameter 

disable network registration unsolicited result code 

1 enable network registration unsolicited result code +CGREG : < stat > 

2 enable network registration and location information unsohcited result code 
+CGREG: <stat> [, <lac>, <ci> [, <AcT>, <rac>] ] 

<stat>: a numeric parameter that indicates the GPRS registration status 

not registered, MT is not currently searching an operator to register to 

1 registered, home network 

2 not registered, but MT is currently trying to attach or searching an operator to register to 

3 registration denied 

4 unknown (e.g. out of GERAN/UTRAN coverage) 

5 registered, roaming 

6 registered for "SMS only", home network (not applicable) 

7 registered for "SMS only", roaming (not applicable) 

8 attached for emergency bearer services only (see NOTE 2) (applicable only when <AcT> indicates 2,4,5,6) 

NOTE 2: 3GPP TS 24.008 [8] and 3GPP TS 24.301 [83] specify the condition when the MS is considered as 

attached for emergency bearer services. 

<lac>: string type; two byte location area code in hexadecimal format (e.g. "00C3" equals 195 in decimal) 
<ci>: string type; four byte GERAN/UTRAN cell ID in hexadecimal format 
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<AcT>: a numeric parameter that indicates the access technology of the serving cell 

GSM 

1 GSM Compact 

2 UTRAN 

3 GSM w/EGPRS (see NOTE 3) 

4 UTRAN w/HSDPA (see NOTE 4) 

5 UTRAN w/HSUPA (see NOTE 4) 

6 UTRAN w/HSDPA and HSUPA (see NOTE 4) 

7 E-UTRAN (not apphcable) 

NOTE 3: 3GPP TS 44.060 [71] specifies the System Information messages which give the information about 
whether the serving cell supports EGPRS. 

NOTE 4: 3GPP TS 25.331 [74] specifies the System Information blocks which give the information about whether 
the serving cell supports HSDPA or HSUPA. 

<rac>: string type; one byte routing area code in hexadecimal format 

Implementation 

Optional. 

1 0.1 .21 Select service for MO SMS messages +CGSMS 



Table 129: +CGSMS parameter command syntax 



Command 


Possible Response(s) 


+CGSMS= [<service>] 


OK 

ERROR 


+CGSMS? 


+CGSMS : <service> 


+CGSMS=? 


+CGSMS : (hst of currently available <service>s) 



Description 

The set command is used to specify the service or service preference that the MT will use to send MO SMS messages. 

The read command returns the currently selected service or service preference. 

The test command is used for requesting information on the currently available services and service preferences. 
Defined Values 

<service>: a numeric parameter which indicates the service or service preference to be used 

Packet Domain 

1 circuit switched 

2 Packet Domain preferred (use circuit switched if GPRS not available) 

3 circuit switched preferred (use Packet Domain if circuit switched not available) 
Other values are reserved and will result in an ERROR response to the set command. 
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Implementation 

Optional. 

10.1.22 EPS network registration status +CEREG 



Table 10.1.22-1: +CEREG parameter command syntax 



Command 


Possible response(s) 


+CEREG= [<n>] 


+CME ERROR: <err> 


+CEREG? 


+CEREG: <n>, <stat> [, <tac>, <ci> [, <AcT>] ] 


+CEREG=? 


+CEREG : (list of supported <n>s) 



Description 

The set command controls the presentation of an unsolicited result code +CEREG : < stat > when <n>=l and there is 
a change in the MT's EPS network registration status in E-UTRAN, or unsoUcited result code 
+CEREG : <stat> [ , <tac> , <ci> [ , <AcT>] ] when <n>=2 and there is a change of the network cell in E- 
UTRAN; in this latest case <AcT>, <tac> and <ci> are sent only if available. 

NOTE 1 : If the EPS MT in GERAN/UTRAN/E-UTRAN also supports circuit mode services and/or GPRS services, 
the +CREG command and +CREG : result codes and/or the +CGREG command and +CGREG : result 
codes apply to the registration status and location information for those services. 

The read command returns the status of result code presentation and an integer <stat> which shows whether the 
network has currently indicated the registration of the MT. Location information elements <tac>, <ci> and <AcT>, 
if available, are returned only when <n>=2 and MT is registered in the network. 

Defined values 

<n>: a numeric parameter 

disable network registration unsolicited result code 

1 enable network registration unsohcited result code +CEREG: <stat> 

2 enable network registration and location information unsohcited result code 
+CEREG: <stat> [, <tac>, <ci> [, <AcT>] ] 

<stat>: a numeric parameter that indicates the EPS registration status 

not registered, MT is not currently searching an operator to register to 

1 registered, home network 

2 not registered, but MT is currently trying to attach or searching an operator to register to 

3 registration denied 

4 unknown (e.g. out of E-UTRAN coverage) 

5 registered, roaming 

6 registered for "SMS only", home network (not apphcable) 

7 registered for "SMS only", roaming (not applicable) 

8 attached for emergency bearer services only (See NOTE 2) 

NOTE 2: 3GPP TS 24.008 [8] and 3GPP TS 24.301 [83] specify the condition when the MS is considered as 
attached for emergency bearer services. 

<tac>: string type; two byte tracking area code in hexadecimal format (e.g. "00C3" equals 195 in decimal) 
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<ci>: string type; four byte E-UTRAN cell ID in hexadecimal format 

<AcT>: a numeric parameter that indicates the access technology of the serving cell 

GSM (not applicable) 

1 GSM Compact (not applicable) 

2 UTRAN (not applicable) 

3 GSM w/EGPRS (see NOTE 3) (not apphcable) 

4 UTRAN w/HSDPA (see NOTE 4) (not apphcable) 

5 UTRAN w/HSUPA (see NOTE 4) (not apphcable) 

6 UTRAN w/HSDPA and HSUPA (see NOTE 4) (not apphcable) 

7 E-UTRAN 

NOTE 3: 3GPP TS 44.060 [71] specifies the System Information messages which give the information about 
whether the serving ceU supports EGPRS. 

NOTE 4: 3GPP TS 25.331 [74] specifies the System Information blocks which give the information about whether 
the serving cell supports HSDPA or HSUPA. 

Implementation 

Optional. 

10.1.23 PDP Context Read Dynamic Parameters +CGCONTRDP 



Table 10.1.23-1: +CGCONTRDP action command syntax 



Command 


Possible response(s) 


+CGCONTRDP= [<cid>] 


+CGCONTRDP: <cid> , <bearer id> , <apn> [ , <so 
urce address and subnet 

mask>[,<gw addr> [ , <DNS_prim addr>[,<DNS 
sec_addr> [ , <P-CSCF_prim_addr> [ , <P- 
CSCF sec addr>[,<Iiyi CN Signalling Flag>] 
]]]]]] 

[<CR><LF>+CGCONTRDP: <cid> , <bearer id>,< 
apn> [ , <source address and subnet mask> 

[ , <gw_addr> [ , <DNS_prim_addr> [ , <DNS_sec_a 
ddr> [ , <P-CSCF_priTn addr>[,<P- 
CSCF sec addr>[,<IM CN Signalling Flag>] 
]]]]]] 

[...]] 


+CGCONTRDP=? 


+ CGCONTRD P : ( list of < c i d > s associated with active 
contexts) 



Description 

The execution command returns the relevant information <bearer_id>, <apn>, <ip_addr>, <subnet_niask>, 
<gw_addr>, <DNS_prim_addr>, <DNS_sec_addr>, <P-CSCF_prim_addr>, <P-CSCF_sec_addr> and 
<IM_CN_Signalling_Flag> for a non secondary PDP Context established by the network with the primary 
context identifier <cid>. If the context cannot be found an ERROR response is returned. 

If the MT has dual stack capabilities, two hnes of information are returned per <cid>. First one line with the IPv4 
parameters followed by one line with the IPv6 parameters. 
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If the parameter <cid> is omitted, the relevant information for all estabhshed PDP contexts are returned. 

NOTE: The dynamic part of the PDP context will only exist if established by the network. 
The test command returns a list of <cid>s associated with active contexts. 
Defined values 

<cid>: a numeric parameter which specifies a particular non secondary PDP context definition. The parameter is 
local to the TE-MT interface and is used in other PDP context-related commands. 

<bearer_id>: a numeric parameter which identifies the bearer, EPS Bearer in EPS and NSAPl in UMTS/GPRS. 

<APN>: a string parameter which is a logical name that was used to select the GGSN or the external packet data 
network. 

<source address and subnet mask>: string type. Shows the IP Address and subnet mask of the MT The 
string is given as dot-separated numeric (0-255) parameters on the form: 

"al.a2.a3.a4.ml.m2.m3.m4" for IPv4 or 

"al.a2.a3.a4.a5.a6.a7.a8.a9.al0.all.al2.al3.al4.al5.al6.ml.m2.m3.m4.m5.m6.m7.m8.m9.ml0.mll.ml2.ml3. 
ml4.ml5.ml6", for IPv6. 

When +CGPIAF is supported, it"s settings can influence the format of this parameter returned with the execute 
form of +CGCONTRDP. 

<gw_addr>: a string parameter which shows the Gateway Address of the MT. The string is given as dot-separated 
numeric (0-255) parameters 

When +CGPIAF is supported, its settings can influence the format of this parameter returned with the execute 
form of +CGCONTRDP. 

<DNS_prim_addr>: a string parameter which shows the IP Address of the primary DNS Server. 

When +CGPIAF is supported, it"s settings can influence the format of this parameter returned with the execute 
form of +CGCONTRDP. 

<DNS_sec_addr>: a string parameter which shows the IP address of the secondary DNS Server. 

When +CGPIAF is supported, it"s settings can influence the format of this parameter returned with the execute 
form of +CGCONTRDP. 

<P_CSCF_prim_addr>: a string parameter which shows the IP Address of the primary P-CSCF Server. 

When +CGPIAF is supported, it's settings can influence the format of this parameter returned with the execute 
form of +CGCONTRDP. 

<P_CSCF_sec_addr>: a string parameter which shows the IP Address of the secondary P-CSCF Server. 

When +CGPIAF is supported, its settings can influence the format of this parameter returned with the execute 
form of +CGCONTRDP. 

< I M_CN_S i gna 1 1 i ng_F 1 ag > : a numeric parameter used to show whether the PDP context is for IM CN 
subsystem-related signalling only or not. 

PDP context is not for IM CN subsystem-related signalling only 

1 PDP context is for IM CN subsystem-related signalling only 
Implementation 

Optional. 



ETSI 



3GPP TS 27.007 version 1 0.5.0 Release 10 210 ETSI TS 1 27 007 VI 0.5.0 (201 1 -1 0) 

10.1.24 Secondary PDP Context Read Dynamic Parameters 
+CGSCONTRDP 

Table 10.1.24-1: +GGSCONTRDP action command syntax 



Command 


Possible response(s) 


+CGSCONTRDP= [<cid>] 


+CGSCONTRDP: <cid> , <p_cid> , <bearer_id> [, <IM_CN_S 
ignalling Flag>] 

[<CR><LF>+CGSCONTRDP : <cid>,<p cid>,<bearer id> [ 
,<IM CN Signalling Flag>] 

[...]] 


+CGSCONTRDP=? 


+ CGS CONTRD P : { list of < c i d > s associated with active contexts ) 



Description 

The execution command returns <p_cid>, <bearer_id> and <IM_CN_Signalling_Flag> for a given 
<cid>. If the context cannot be found an ERROR response is returned. 

If the parameter <cid> is omitted, the <cid>, <p_cid>, <bearer_id> and <IM_CN_Signalling_Flag> are 
returned for all established PDP contexts. 

In EPS, the Traffic Flow parameters are returned. 

NOTE: Parameters for network initiated PDP contexts are returned as well. The dynamic part of the PDP context 
will only exist if estabUshed by the network. 

The test command returns a list of <cid>s associated with active contexts. 

Defined values 

<cid>: a numeric parameter which specifies a particular PDP context or Traffic Flows definition. The parameter is 
local to the TE-MT interface and is used in other PDP context-related commands (see the +CGDCONT and 
+CGDSCONT commands). 

<p_cid>: a numeric parameter which specifies a particular PDP context definition or default EPS context 
Identifier which has been specified by use of the +CGDCONT command. The parameter is local to the TE-MT 
interface (see the +CGDSCONT command). 

<bearer_id>: a numeric parameter which identifies the bearer, EPS Bearer in EPS and NSAPI in UMTS/GPRS. 

<IM_CN_Signalling_Flag> : a numeric parameter used to show whether the PDP context is for IM CN 
subsystem-related signalling only or not. 

PDP context is not for IM CN subsystem-related signalUng only 

1 PDP context is for IM CN subsystem-related signalling only 
Implementation 

Optional. 

10.1 .25 Traffic Flow Template Read Dynamic Parameters +CGTFTRDP 



Table 10.1.25-1: +CGTFTRDP action command syntax 



Command 


Possible Response(s) 


+CGTFTRDP= [<cid>] 


+CGTFTRDP: <cid> , <packet filter 

identif ier> , <evaluation precedence index> ,< source 
address and subnet maslo, <protocol number (ipv4) / 
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Command 


Possible Response(s) 




next header {ipv6) >, <destination port 
range> , <source port range> , <ipsec security 
parameter index (spi)>,<type of service (tos) 
(ipv4) and mask / traffic class (ipv6) and 
mask>,<flow label ( ipv6 ) > , <direction> , <NW packet 
filter Identifier> 

[<CR><LF>+CGTFTRDP : <cid> , <packet filter 
identif ier> , <evaluation precedence index> ,< source 
address and subnet mask> , <protocol number (ipv4) / 
next header (ipv6) >, <destination port range>, 
<source port range> , <ipsec security parameter 
index {spi)>,<type of service (tos) {ipv4) and 
mask / traffic class (ipv6) and mask>,<flow label 

(ipv6) >, <direction>, <NW packet filter Identif ier> 

[...]] 


+CGTFTRDP=? 


+CGTFTRDP : (list of <cid>s associated with active contexts) 



Description 

The execution command returns the relevant information about Traffic Flow Template of <cid> together with the 
additional network assigned values when estabUshed by the network. If the context cannot be found an ERROR response 
is returned. 

If the parameter <cid> is omitted, the Traffic Flow Templates for all established PDP contexts are returned. 
Parameters of both network and MT/TA initiated PDP contexts will be returned. 
The test command returns a list of <cid>s associated with active contexts. 
Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition or Traffic Flows definition (see 
+CGDCONT and +CGDSCONT conamands). 

The following parameters are defined in 3GPP TS 23.060 [47] - 

<packet filter identif ier>: a numeric parameter. The value range is from 1 to 16. 

<evaluation precedence index>: a numeric parameter. The value range is from to 255. 

<source address and subnet mask>: string type. The string is given as dot-separated numeric (0-255) 
parameters on the form: 
"al.a2.a3.a4.ml.m2.m3.m4" for IPv4 or 

"al.a2.a3.a4.a5.a6.a7.a8.a9.al0.all.al2.al3.al4.al5.al6.ml.m2.m3.m4.m5.m6.m7.m8.m9.ml0.mll.ml2.ml3. 
ml4.ml5.ml6", for IPv6. 

When +CGPIAF is supported, it"s settings can influence the format of this parameter returned with the execute 
form of +CGTFTRDP. 

<protocol number (ipv4) / next header { ipv6) >: a numeric parameter, value range from to 
255. 

<destination port range>: string type. The string is given as dot-separated numeric (0-65535) parameters 
on the form "f.t". 

<source port range>: string type. The string is given as dot-separated numeric (0-65535) parameters on the 
form "f.t". 
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< ipsec security parameter index { spi ) >: numeric value in hexadecimal format. The value range is 

from 00000000 to FFFFFFFF. 

<type of service (tos) {ipv4) and mask / traffic class {ipv6) and mask>: 
string type. The string is given as dot-separated numeric (0-255) parameters on the form "t.m". 

< f low label { ipv6 ) >: numeric value in hexadecimal format. The value range is from 00000 to FFFFF. Valid 

for IPv6 only. 

<direction> a numeric parameter which specifies the transmission direction in which the Packet Filter shall be 
applied. 

Pre Release 7 TFT Filter (see 3GPP TS 24.008 [8], table 10.5.162) 

1 Uphnk 

2 Downlink 

3 Bidirectional (Used for Uplink and Downlink) 

<NW packet filter Identif ier> a numeric parameter. The value range is from 1 to 16. In EPS the value 
is assigned by the network when established 

NOTE: Some of the above listed attributes can coexist in a Packet Filter while others mutually exclude each 
other. The possible combinations are shown in 3GPP TS 23.060 [47]. 

Implementation 

Optional. 

1 0.1 .26 Define EPS Quality Of Service +CGEQOS 



Table 10.1.26-1: +CGEQOS parameter command syntax 



Command 


Possible Response(s) 


+CGEQOS= [<cid> [, <QCI> [ , <DL_GBR> , <UL_GBR 
> [ , <DL_MBR> , <UL_MBR] ] ] ] 


+CME ERROR: <err> 


+CGEQOS? 


+CGEQOS: <cid>,<QCI>, [<DL_GBR> , <UL_GBR> 
] , [<DL_MBR>, <UL_MBR>] 

[<CR>>LF>+CGEQOS : <cid>,<QCI>, [<DL_GBR> 
,<UL_GBR>] , [<DL_MBR>, <UL_MBR>] 

[...]] 


+CGEQOS=? 


+CGEQOS : (range of supported <cid>s) , (hstof 
supported <QC I >s) , (list of supported 
<DL_GBR>s) , (hstof supported <UL_GBR>s) , (list of 
supported <DL_MBR>s) , (hst of supported 
<UL_MBR>s) 



Description 

The set command allows the TE to specify the EPS Quality of Service parameters <cid>, <QCI>, [<DL_GBR> and 
<UL_GBR>] and [<DL_MBR> and <UL_MBR>] for a PDP context or Traffic Flows. When in UMTS/GPRS the MT 
applies a mapping function to UTMS/GPRS Quality of Service. Refer subclause 9.2 for <err> values. 

A special form of the set command, +CGEQOS= <cid> causes the values for context number <cid> to become 
undefined. 

The read command returns the current settings for each defined QoS. 
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The test command returns the ranges of the supported parameters. 
Defined values 

<cid>: a numeric parameter which specifies a particular EPS Traffic Flows definition in EPS and a PDP Context 
definition in UMTS/GPRS (see the +CGDCONT and +CGDSCONT commands). 

<QCI>: a numeric parameter that specifies a class of EPS QoS. (see 3GPP TS 23.203 [85]) 

QCI is selected by network 

[1-4] value range for guranteed bit rate Traffic Flows 

[5 - 9] value range for non-guarenteed bit rate Traffic Flows 

<DL_GBR>: a numeric parameter which indicates DL GBR in case of GBR QCI. The value is in kbit/s. This 
parameter is omitted for a non-GBR QCI. (see 3GPP TS 24.301 [83]) 

<UL_GBR>: a numeric parameter which indicates UL GBR in case of GBR QCI. The value is in kbit/s. This 
parameter is omitted for a non-GBR QCI. (see 3GPP TS 24.301 [83]) 

<DL_MBR>: a numeric parameter which indicates DL MBR in case of GBR QCI. The value is in kbit/s. This 
parameter is omitted for a non-GBR QCI. (see 3GPP TS 24.301 [83]) 

<UL_MBR>: a numeric parameter which indicates UL MBR in case of GBR QCI. The value is in kbit/s. This 
parameter is omitted for a non-GBR QCI. (see 3GPP TS 24.301 [83]) 

Implementation 

Optional. 

10.1 .27 EPS Quality Of Service Read Dynamic Parameters +CGEQOSRDP 



Table 10.1.27-1: +CGEQOSRDP action command syntax 



Command 


Possible Response(s) 


+CGEQOSRDP= [<cid>] 


+CGEQOSRDP: <cid>,<QCI>, [<DL_GBR> , <UL_GBR>] , 

[<DL_MBR>, <UL_MBR>] 

[<CR>>LF>+CGEQOSRDP: <cid>,<QCI>, [<DL_GBR>,< 
UL_GBR>] , [<DL_MBR>, <UL_MBR>] 

[...]] 


+CGEQOSRDP=? 


+CGEQOSRDP : (list of <cid>s associated with active 
contexts) 



Description 

The execution command returns the Quality of Service parameters <QCI>, [<DL_GBR> and <UL_GBR>] and 
[<DL_MBR> and <UL_MBR>] of the established PDP Context associated to the provided context identifier <cid>. If 
the context cannot be found an ERROR response is returned. 

If the parameter <cid> is omitted, the Quality of Service parameters for all established PDP contexts are returned. 
The test command returns a list of <cid>s associated with active contexts. 
Parameters of both network and MT/TA initiated PDP contexts will be returned. 
Defined values 

<cid>: a numeric parameter which specifies a particular Traffic Flows definition in EPS and a PDP Context 
definition in UMTS/GPRS (see the +CGDCONT and +CGDSCONT commands). 
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<QCI>: a numeric parameter that specifies a class of EPS QoS. (see 3GPP TS 23.203 [85]) 

QCI is selected by network 

[1-4] value range for guranteed bit rate Traffic Flows 

[5 - 9] value range for non-guarenteed bit rate Traffic Flows 

<DL_GBR>: a numeric parameter which indicates DL GBR in case of GBR QCI. The value is in kbit/s. This 
parameter is omitted for a non-GBR QCI. (see 3GPP TS 24.301 [83]) 

<UL_GBR>: a numeric parameter which indicates UL GBR in case of GBR QCI. The value is in kbit/s. This 
parameter is omitted for a non-GBR QCI. (see 3GPP TS 24.301 [83]) 

<DL_MBR>: a numeric parameter which indicates DL MBR in case of GBR QCI. The value is in kbit/s. This 
parameter is omitted for a non-GBR QCI. (see 3GPP TS 24.301 [83]) 

<UL_MBR>: a numeric parameter which indicates UL MBR in case of GBR QCI. The value is in kbit/s. This 
parameter is omitted for a non-GBR QCI. (see 3GPP TS 24.301 [83]) 

Implementation 

Optional. 

10.1.28 UE modes of operation for EPS +CEMODE 



Table 10.1.28-1: +CEMODE parameter command syntax 



Command 


Possible Response(s) 


+CEMODE= [<mode>] 


OK 

ERROR 


+CEMODE? 


+CEMODE: <mode> 


+CEMODE=? 


+CEMODE : (list of supported <niode>s) 



Description 

The set command is used to set the MT to operate according to the specified mode of operation for EPS, see 
3GPP TS 24.301 [83]. If the requested mode of operation is not supported, an ERROR or +CiyiE ERROR response is 
returned. Extended error responses are enabled by the +CMEE command. 

The read conmiand returns the mode of operation set by the TE, independent of the current serving cell capability and 
independent of the current serving cell Access Technology. 

The test command is used for requesting information on the supported MT mode of operation. 
Defined Values 

<mode>: a numeric parameter which indicates the mode of operation 

PS mode 2 of operation 

1 CS/PS mode 1 of operation 

2 CS/PS mode 2 of operation 

3 PS mode 1 of operation 

NOTE: the definition for UE modes of operation can be found in 3GPP TS 24.301 [83] 
Other values are reserved and will result in an ERROR response to the set command. 
Implementation 
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Optional. 



1 0. 1 .29 Delete non-active PDP contexts +CGDEL 

Table 10.1.29-1: +CGDEL action command syntax 



Command 


Possible Response(s) 


+CGDEL [=<cid>] 


+CGDEL: <cid> [, <cid> [,...] ] 
+CME ERROR: <err> 


+CGDEL=? 





Description 

The execution command +CGDEL=<cid>removes the indicated PDP context and removes all associated data related 

to the indicated PDP contexts that are not activated. The AT command will not delete or remove information for 
activated PDP contexts. The removed PDP context is listed by the +CGDEL : <cid> intermediate result code. 

If <cid> points to a primary PDP context, the PDP context will be deleted together with all linked secondary PDP 
contexts if none of the PDP contexts are activated. 

If <cid> points to a secondary PDP context, the PDP context will be deleted if it is not activated. 

A special form of the command can be given as +CGDEL (with the =<cid> omitted). In this form, all primary PDP 
contexts that are not activated or have any activated secondary PDP contexts will be removed and all secondary PDP 
contexts that are not activated will be removed. The associated data of all the deleted PDP contexts will be removed, 
and the removed PDP context are Usted by the +CGDEL : <cid> [ , <cid> [,...]] intermediate result code. 
Activated PDP contexts will not cause this form of the command to return ERROR or +CME ERROR. 

NOTE: +CGDEL will remove associated PDP context data that can be set by the AT commands +CGDCONT, 
+CGDSCONT, +CGTFT, +CGEQREQ, +CGEQMIN and +CGEQOS. 

For an attempt to delete PDP context(s) which would violate these rules, a +CME ERROR response is returned. Refer 
subclause 9.2 for possible <err> values. 

Defined values 

<cid>: a numeric parameter which specifies a particular PDP context definition (see the +CGDCONT and 
+CGDSCONT commands). 

Implementation 

Optional. 

1 0. 1 .30 Signalling Connection Status +CSCON 



Table 10.1.30-1: +CSCON parameter command syntax 



Command 


Possible response(s) 


+CSCON=<n> 


+CME ERROR: <err> 


+CSCON? 


+CSCON: <n> , <mode> [ , <state>] 
+CME ERROR: <err> 


+CSCON=? 


+ C S CON : ( list of supported < n > s ) 



Description 

The set command controls the presentation of an unsolicited result code +CSCON. If <n>=l, +CSCON : <mode> is 
sent from the MT when the connection mode of the MT is changed. If <n>=2 and there is a state within the current 
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mode, +CSCON : <mode> [, <state>] is sent from the MT. If setting fails, a MT error, +CME ERROR: <err> is 
returned. Refer subclause 9.2 for <err> values. 

When the MT is in UTRAN or E-UTRAN, the mode of the MT refers to idle when no PS signalhng connection and to 
connected mode when a PS signalling cormection between UE and network is setup. When the UE is in GERAN, the 
mode refers to idle when the MT is in either the IDLE state or the STANDBY state and to connected mode when the 
MT is in READY state. 

The <state> value indicates the state of the MT when the MT in UTRAN connected mode. 

The read command returns the status of result code presentation and an integer <mode> which shows whether the MT 
is currently in idle mode or connected mode. State information <state> is returned only when <n>=2. 

Defined values 

<n>: a numeric parameter 

disable unsohcited result code 

1 enable unsolicited result code +CSCON : <mode> 

2 enable unsolicited result code +CSCON : <mode> [ , <state>] 
<mode>: a numeric parameter that indicate the signalhng connection status 

idle 

1 connected 

<state>: a numeric parameter that indicates the RRC state information if the MT is in cormected Mode while in 
UTRAN. 

UTRAN URA_PCH state 

1 UTRAN Cell_PCH state 

2 UTRAN Cell_FACH state 

3 UTRAN Cell_DCH state 
Implementation 

Optional. 

1 0.2 Modem compatibility commands 

10.2.0 General 

This subclause describes how existing AT commands, designed for use with a modem, may be used to control a Packet 
Domain MT. This is to provide backwards compatibility with existing connmunications software. For new apphcations 
it is recommended that the Packet Domain- specific commands, described in previous subclauses, be used. 

10.2.1 MT originated PDP context activation 
10.2.1.0 General 

In this mode of operation, the MT behaves like an originating modem and accepts the normal V.250 commands 
associated with placing and clearing a call. If Packet Domain-specific configuration commands are required, they may 
be sent to the MT as part of the modem initialization commands. 
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1 0.2.1 .1 Request Packet Domain service 'D' 



Table 130: D command syntax 



Command 


Possible Response(s) 


D*<GPRS SC> [* [<called address>] [* [<L2P>] 
[* [<cid> [,<cid> [, ...]]]]]]# 


CONNECT 
ERROR 



Description 

This command causes the MT to perfomi whatever actions are necessary to estabUsh communication between the TE 
and the external PDN. 

The V.250 'D' (Dial) command causes the MT to enter the V.250 online data state and, with the TE, to start the 
specified layer 2 protocol. The MT shall return CONNECT to confirm acceptance of the command prior to entering the 
V.250 online data state. No further commands may follow on the AT command line. 

The detailed behaviour after the online data state has been entered is dependent on the PDP type. It is described briefly 
in clause 9 (for IP) of 3GPP TS 27.060 [34]. PS attachment and PDP context activation procedures may take place prior 
to or during the PDP startup if they have not already been performed using the +CGATT and +CGACT commands. 

When the layer 2 protocol has terminated, either as a result of an orderly shut down of the PDP or an error, the MT shall 
enter V.250 cormnand state and return the NO CARRIER final result code. 

If < called address > is supported and provided, the MT shall automatically set up a virtual caU to the specified 
address after the PDP context has been activated. 

If <L2P> and <cid> are supported, their usage shall be the same as in the +CGDATA command. The +CGDCONT, 
+CGQREQ, etc. commands may be used in the modem initialization AT command string to set values for for PDP type, 
APN, QoS etc.. 

If <L2 P> is not supported or is supported but omitted, the MT shall use a layer 2 protocol appropriate to the PDP type. 

If <cid> is not supported or is supported but omitted, the MT shall attempt to activate the context using: 

(a) any information provided by the TE during the PDP startup procedure, e.g. the TE may provide a PDP type 
and/or PDP address to the MT; 

(b) a priori knowledge, e.g. the MT may implement only one PDP type; or 

(c) using the 'Empty PDP type' (3GPP TS 24.008 [8]). (No PDP address or APN shall be sent in this case and only 
one PDP context subscription record shall be present in the HLR for this subscriber.) 

This conmnand may be used in both normal and modem compatibility modes. 

NOTE: The dial string conforms to the syntax specified in 3GPP TS 22.030 [19]. 

Defined Values 

<GPRS_SC>: (GPRS Service Code) a digit string (value 99) which identifies a request to use the Packet Domain 
service 

<called_address>: a string that identifies the called party in the address space applicable to the PDP. For 
communications software that does not support arbitrary characters in the dial string, a numeric equivalent may 
be used. Also, the character conama ',' may be used as a substitute for the character period 

<L2P>: a string which indicates the layer 2 protocol to be used (see +CGDATA command). For communications 
software that does not support arbitrary characters in the dial string, the following numeric equivalents shall be 
used: 

NULL (Obsolete) 
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1 PPP 

2 PAD (Obsolete) 

3 X25 (Obsolete) 
9yyyy M-xxxx 

Other values are reserved and will result in an ERROR response 

<cid>: a digit string which specifies a particular PDP context definition (see the +CGDCONT and +CGDSCONT 
commands). 

Implementation 

Optional if the +CGDATA command is supported. If the D command is provided, then support for 
<called_address>, <L2P> and <cid> are optional. If they are not supported but values are provided by the TE, 
the values shall be ignored and this shall not constitute an error. 

1 0.2.1 .2 Request Packet Domain IP service 'D' 



Table 131 : D command syntax 



Command 


Possible Response(s) 


D*<GPRS_SC_IP> [*<cid> [, <cid> [, ...]]]# 


CONNECT 
ERROR 



Description 

This command causes the MT to perform whatever actions are necessary to estabUsh communication between the TE 

and the external PON. 

The V.250 'D' (Dial) command causes the MT to enter the V.250 online data state and, with the TE, to start the 
specified layer 2 protocol. The MT shall return CONNECT to confirm acceptance of the command prior to entering the 
V.250 online data state. No further commands may follow on the AT command line. 

The detailed behaviour after the online data state has been entered is described briefly in clause 9, for IP, of 

3GPP TS 27.060 [34]. GPRS attachment and PDP context activation procedures may take place prior to or during the 

PDP startup if they have not already been performed using the +CGATT and +CGACT commands. 

When the layer 2 protocol has terminated, either as a result of an orderly shut down of the PDP or an error, the MT shall 
enter V.250 command state and return the NO CARRIER final result code. 

If <cid> is supported, its usage shall be the same as in the +CGDATA command. The +CGDCONT, +CGQREQ, etc. 
commands may be used in the modem initialization AT conmiand string to set values for for PDP type, APN, QoS etc. 

If <cid> is not supported or is supported but omitted, the MT shall attempt to activate the context using: 

(a) any information provided by the TE during the PDP startup procedure, e.g. the TE may provide a PDP type 
and/or PDP address to the MT; 

(b) a priori knowledge, e.g. the MT may implement only one PDP type; or 

(c) using the 'Empty PDP type' (3GPP TS 24.008 [8]). (No PDP address or APN shall be sent in this case and only 
one PDP context subscription record shall be present in the HLR for this subscriber.) 

This command may be used in both normal and modem compatibility modes. 

NOTE. The dial string conforms to the syntax specified in 3GPP TS 22.030 [19]. 

Defined Values 
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<GPRS_SC_IP>: (GPRS Service Code for IP) a digit string (value 98) which identifies a request to use the GPRS 
with IP (PDP types IP and PPP) 

<cid>: a digit string which specifies a particular PDP context definition (see +CGDCONT conunand). 

Implementation 

Optional if the +CGDATA command is supported. If the D command is provided, then support for <cid> is optional. If 
it is not supported but a value is provided by the TE, the value shall be ignored and this shall not constitute an error. 

1 0.2.2 Network requested PDP context activation 

10.2.2.0 General 

In this mode of operation, the MT behaves like an answering modem and accepts the normal V.250 commands 
associated with answering a call. If Packet Domain-specific configuration commands are required, they may be sent to 
the MT as part of the modem initialization commands. 

The +CGAUTO command is used to select modem compatibility mode. 

1 0.2.2.1 Automatic response to a network request for PDP context activation 'SO' 

The V.250 'SO=n' (Automatic answer) command may be used to turn off (n=0) and on (n>0) the automatic response to a 
network request for a PDP context activation. 

When the 'SO=n' (n>0) command is received, the MT shall attempt to perform a PS attach if it is not already attached. 
Failure will result in ERROR being returned to the TE. Subsequently, the MT will announce a network request for PDP 
context activation by issuing the unsolicited result code RING to the TE, followed by the intermediate result code 
CONNECT. The MT then enters V.250 online data state and follows the same procedure as it would after having 
received a +CGANS=1 with no <L2P> or <cid> values specified. 

NOTE: The 'SO=n' (n=0) conmiand does not perform an automatic PS detach. 

Implementation 

Optional. 

1 0.2.2.2 Manual acceptance of a network request for PDP context activation 'A' 

The V.250 'A' (Answer) command may be used to accept a network request for a PDP context activation announced by 
the unsoUcited result code RING. The MT responds with CONNECT, enters V.250 online data state and follows the 
same procedure as it would after having received a +CGANS=1 with no <L2P> or <cid> values specified. It is an 
error to issue the 'A' cormnand when there is no outstanding network request. 

Implementation 

Optional. 

1 0.2.2.3 Manual rejection of a network request for PDP context activation 'H' 

The V.250 'H' or 'HO' (On-hook) command may be used to reject a network request for PDP context activation 
announced by the unsoUcited result code RING. The MT responds with OK. It is an error to issue the 'H' command when 
there is no outstanding network request. 

NOTE: This is an extension to the usage of the 'H' command that is described in ITU- 
T Recommendation V.250 [14]. 

Implementation 

Optional. 
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1 1 Commands for VGCS and VBS 

1 1 .0 General 

This clause defines commands that a TE may use to control a VGCS or VBS supporting MT. The requirements for the 
VGCS and VBS are included in the following specifications: 

- Voice Group Call service (VGCS): 3GPP TS 42.068 [55], 3GPP TS 43.068 L49] and 3GPP TS 44.068 [52]; 

- Voice Broadcast Service (VBS): 3GPP TS 42.069 [56], 3GPP TS 43.069 [50] and 3GPP TS 44.069 [53]. 
It is anticipated that VGCS or VBS supporting MTs will vary widely in functionality. 

A comprehensive set of VGCS and VBS-specific commands is defined in subclause 11.1 to provide the flexibiUty 
needed by the more complex MT. The commands use the extended information and error message capabilities 
described in this specification. 

For the simplest MTs, and for backwards compatibility with existing communications software, it is possible to control 
access to the VGCS and VBS using existing modem-compatible commands. A special dial-string syntax is defined for 
use with the D command. This "modem compatible" mode of operation is described in subclause 1 1.2. 

11.1 Commands specific to IVITs supporting the VGCS and VBS 
11.1.1 Accept an incoming Voice Group or Voice Broadcast Call +CAJOIN 



Table 132: +GAJOIN action command syntax 



Command 


Possible Response(s) 


+CAJOIN=<service>, <GId>, <GCA> 


+CME ERROR: <err> 


+CAJOIN=? 





Description 

The execute command accepts an incoming or ongoing voice group or voice broadcast call. 
See command +CALCC to get a list of current voice group or voice broadcast calls. 
Defined Values 

<GId>: a digit string that specifies the group identification for the incoming voice group or voice broadcast call. 

<GCA>: a digit string that specifies the group call area identification for the incoming voice group or voice 
broadcast call. 

<service> (tele-service): 

17 voice group call 

18 voice broadcast call 
Implementation 

Mandatory for a MT supporting AT commands only and VGCS or VBS is implemented. 
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1 1 .1 .2 Reject an incoming Voice Group or Voice Broadcast Call +CAREJ 



Table 133: +CAREJ action command syntax 



Command 


Possible Response(s) 


+CAREJ=<service> , <GId> , <GCA> 


+CME ERROR: <err> 


+CAREJ=? 





Description 

The execute command rejects an incoming voice group or voice broadcast call indicated by RING or +CRING, the 
command is applicable as long as the indication is pending. 

If the call is once rejected the RING or +CRING indication is not repeated to TE although the caU is still running and 
notifications for the call are received. 

See command +CALCC to get a list of current voice group or voice broadcast calls. 
Defined Values 

<GId>: a digit string that specifies the group identification for the incoming voice group or voice broadcast call. 

<GCA>: a digit string that specifies the group call area identification for the incoming voice group or voice 
broadcast call. 

<service> (tele-service): 

17 voice group call 

18 voice broadcast call 
Implementation 

Mandatory for a MT supporting AT commands only and VGCS or VBS is implemented. 

11 .1 .3 Leave an ongoing Voice Group or Voice Broadcast Gall +CAHLD 



Table 134: +GAHLD action command syntax 



Command 


Possible Response(s) 


+CAHLD 


+CME ERROR: <err> 


+CAHLD=? 





Description 

The execute conmiand forces the MT to leave the active voice group or voice broadcast call without terminating it. The 
conmiand is only applicable if the MT is in group receive mode. The MT returns to idle mode. 

Implementation 

Mandatory for a MT supporting AT commands only and VGCS or VBS is implemented. 

1 1 . 1 .4 Talker Access for Voice Group Call +CAPTT 



Table 135: +GAPTT parameter command syntax 



Command 


Possible Response(s) 


+CAPTT= [<niode> [, <tinie>] ] 


+CME ERROR: <err> 
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+CAPTT? 


+CAPTT: <inode> 
+CME ERROR: <err> 


+CAPTT=? 


+CAPTT: (list of supported <mode>s) , {list of 
supported <time>s) 



Description 

The execute command emulates the Push To Talk function for VGCS talker access. 

If the parameter <mode> is set to value "0" i.e. "Released" the PTT key is assumed to be released immediately. If the 

parameter <niode> is set to value "1" i.e. "PUSHED" the PTT key is assumed to be pushed immediately for the period of 

<time> in seconds. If the command execution is repeated before the <time> expires the PTT timer will be loaded 

with the new <time> value and the PTT key remains "Pushed" for the period of new <time> in seconds. 

If the parameter <mode> is set to value "2" i.e. "PUSHED" the PTT key is assumed to be pushed innmediately for an 

infinite period of time and can be released by <niode> value 0. For <niode>=0 if the parameter <tinie> is issued it is 

ignored. 

If the PTT timer expires after <time> seconds during <mode> "Pushed" an unsolicited result code +CAPTT : is 
issued to the TE. 

The read command returns the current <mode>. 

The test command returns values supported as a compound value. 

Defined Values 

<mode>: integer type. 

status of the PTT key is Released 

1 status of the PTT key is PUSHED for a limited time by < t ime > in seconds 

2 status of the PTT key is Pushed for an infinite time 
<time>: integer type 

3. .255 this gives the time in seconds to wait before the PTT key is released, default value 10 
Implementation 

Mandatory for a MT supporting AT commands only and VGCS is implemented. 

11.1.5 Voice Group Call Uplink Status Presentation +CAULEV 



Table 136: +CAULEV parameter command syntax 



Command 


Possible Response(s) 


+CAULEV= [<mode>] 


+CME ERROR: <err> 


+CAULEV? 


+CAULEV: <niode>, [<status>] 
+CME ERROR: <err> 


+CAULEV=? 


+CAULEV : (Ust of supported <mode>s) 



Description 

The set command enables or disables the presentation of uplink access status for an active VGCS call. When enabled 
the unsoUcited result code +CAULEV: <status> is returned from MT to TE whenever the call uplink status changes. 

Read command returns the current uplink <status> and the selected <niode>. 
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The test command returns values supported as a compound value. 
Defined Values 

<mode>: integer type; status of unsolicited result code presentation 

disabled 

1 enabled 

<status>: integer type; network uplink access status 

uplink free 

1 uplink busy 
Implementation 

Mandatory for a MT supporting AT commands only and VGCS is implemented. 

11 .1 .6 List current Voice Group and Voice Broadcast Calls +CALCC 



Table 137: +CALCC action command syntax 



Command 


Possible response(s) 


+CALCC=<mode> 


+CALCC: <GId> , <GCA> , <service> , <stat> , <dir> , <ack fla 
g> [ , <priority>] 

[<CR><LF>+CALCC : <GId>, <GCA>, <service>, <stat>, <dir> 

, <ack f lag> [ , <priority>] 

[...]] 

+CME ERROR: <err> 


+CALCC=? 


+CALCC : (list of supported <inode>s) 



Description 

The set command returns 

for <mode>=l the active voice group or voice broadcast call and for <niode>=0 a Ust of all current running voice 
group and voice broadcast calls for which the user has a subscription and the GId is activated on the SIM. If the 
command succeeds but no calls are available, OK response is returned. 

Defined values 

<GId>: a digit string that specifies the group identification of the voice group or voice broadcast call. 
<GCA>: a digit string that specifies the group call area of the voice group or voice broadcast call. 
< service > (tele-service): 

17 voice group call 

18 voice broadcast call 
<stat>: integer type (state of the call) 

active, i.e. user participating at the call as talker or listener 

1 held, the call is running but put to backgroimd, notifications ignored 

2 incoming (MT call), the user doesn't respond to notifications of this call yet 
< d i r > : integer type 

mobile originated (MO) call, the user is the originator of the call 
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mobile terminated (MT) call, the user is not the originator of the call 
<ack_f lag>: integer type; proposes that a predefined confirmation procedure is to be used after the call is ended 

confirmation procedure is not required 

1 confirmation procedure is required 

<priority> : optional integer type parameter which identifies the priority level of the voice group or voice 
broadcast call, values specified in 3GPP TS 22.067 [54]. 

Implementation 

Optional. Recommended for a MT supporting AT commands only and VGCS or VBS is implemented. 

1 1 .1 .7 Voice Group or Voice Broadcast Call State Attribute Presentation 
+CACSP 

Table 138: +CACSP parameter command syntax 



Command 


Possible Response(s) 


+CACSP= [<mode>] 


+CME ERROR: <err> 


+CACSP? 


+CACSP : <niode> [ , <da> , <ua> , <coinni> , <oi>] 
+CME ERROR: <err> 


+CACSP=? 


+CACSP : (list of supported <mode>s) 



Description 

The set command enables or disables the presentation of unsohcited result code 

+CACSP : <da> , <ua> , <comm> , <oi > from MT to TE if the call control state attributes of the active voice group 
or voice broadcast call changes. 

Read command returns the current call control state attributes <da>, <ua>, <coniin>, <oi> and selected <mode>. 
The test command returns values supported as a compound value. 
Defined Values 

<mode>: integer type; status of unsolicited result code presentation 

disabled 

1 enabled 

<da>: integer type. User connection in the downlink 

not attached 

1 attached 

<ua>: integer type. User connection in the uplink 

not attached 

1 attached 

<comm>: integer type. The MT assumes that conmiunication with its peer entity is 

not enabled in both directions 

1 enabled in both directions 
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<oi >: integer type. The MT assumes to be 

not the originator of the call 

1 the originator of the call 
Implementation 

Optional. Recommended for a MT supporting AT commands only and VGCS or VBS is implemented. 

1 1 .1 .8 NCH Support Indication +CANCHEV 



Table 139: +CANCHEV parameter command syntax 



Command 


Possible Response(s) 


+CANCHEV= [<mode>] 


+CME ERROR: <err> 


+CANCHEV? 


+CANCHEV: <status> , <mode> 
+CME ERROR: <err> 


+CANCHEV=? 


+CANCHEV: (hst of supported <mode>s) 



Description 

The set command enables or disables the presentation of unsolicited result code +CANCHEV: <status> fromMT to 
TE if the status of the network NCH support information changes. 

Read command returns in parameter < status > the network NCH support information in the selected cell and the 
selected <mode>. 

The test command returns values supported as a compound value. 
Defined Values 

<mode>: integer type; status of unsolicited result code presentation 

disabled 

1 enabled 

<status>: integer type; network NCH support information 

NCH not available 

1 NCH available 
Implementation 

Optional. Recommended for a MT supporting AT commands only and VGCS or VBS is implemented. 

1 1 .1 .9 Originator to Dispatclier Information +COTDI 



Table 140:+COTDI parameter command syntax 



Command 


Possible response(s) 


+COTDI=<message> [ , <OTDIE> [ , <message> 
[, <OTDIE>] ] ] 


+CME ERROR: <err> 


+COTDI? 


+COTDI : <message> , <OTDIE> [ , <niessage> 
, <OTDIE>] 


+COTDI=? 


+COTDI : (hst of supported <message>s) 
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Description 

This command allows control of the Originator-to-Dispatcher Information and Compressed Originator-to-Dispatcher 
Information according to 3GPP TS 44.068 [52] and 3GPP TS 44.069 [53]. 

When <message> and <OTDIE> are both present the string specified in <OTDIE> is included in the corresponding 
group or broadcast control <message> as the value part of the Originator-to-Dispatcher Information Element or 
Compressed Originator-to-Dispatcher Information Element (as defined in 3GPP TS 44.068 [52] and 
3GPP TS 44.069 |53|) into all subsequent messages of type <message>. If parameter <message> is present but 
parameter <OTDIE> is not present then the Originator-to-Dispatcher Information Element shall not be present in sub- 
sequent messages of type <niessage>. 

The read command returns the content of <message> and of <OTDIE>. If no <OTDIE> is available, no information 
text shall be returned. 

Test conmiand returns values supported as a compound value. 
Defined values 

<message> 

SETUP message containing the outgoing Originator-to-Dispatcher Information Element 

1 IMMEDIATE SETUP 2 message containing the outgoing Compressed Originator-to-Dispatcher Information 

Element 

<OTDIE>: the Originator-to-Dispatcher Information Element or Compressed Originator-to-Dispatcher Information 
Element (as defined in 3GPP TS 44.068 [52] and 3GPP TS 44.069 [53]) in hexadecimal character format (for 
hexadecimal format, refer +CSCS). 

Implementation 

Optional. 

1 1.1.10 Short Data Transmission during ongoing VGCS +CEPTT 



Table 141 : +CEPTT action command syntax 



Command 


Possible response(s) 


+CEPTT=<mode>, <data>, <dataid>, <dist- 

param> 


+CME ERROR: <err> 


+CEPTT=? 


+CEPTT : (hst of supported <mode>s) , (list of 
supported <dataid>s) , (Ust of supported <dist- 
parani>s) 



Description 

The execute command emulates the Short Data Transmission during ongoing VGCS according to 3GPP TS 42.068 [55] 
and 3GPP TS 43.068 [49]. 

The application indicator <mode> is used to identify whether the application data is an application- specific data or is a 
confirmation. The data identifier <dataid> is to provide a sequence number of the sending of application data. The 
value of the data identifier <dataid> is dependent on the value of the application indicator <mode>. If the 
application indicator <Tnode> indicates sending application data to the network, the data identifier <dataid> contains 
a number from the range between and 15 which is generated by the mobile station. If the application indicator 
<mode> indicates sending confirmation of the reception of the application data, the data identifier <dataid> shall 
contain the data identifier which was received in the data identity sent by the previous sender. The distribution 
parameter <dist-param> contains information to which participants shall be transferred the short data. 

The response CEPTT string from the network to the other participants is returned in a subsequent unsohcited result 
code +CEPTT: <inode>, <data>, <dataid>, <dist-param> [, <number>] . 
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Test command returns values supported as a compound value. 
Defined values 

<mode>: integer type 

sending of application-specific data 

1 confirmation of receiving application-specific data 

<data>: 9 bytes application- specific data in hexadecimal character format (for hexadecimal character format, refer 
+CSCS). 

<dataid>: a number from the range between and 15 
<dist - param>: a number from the range between 1 and 7 

1 data shall be distributed only to network appUcation 

2 data shall be distributed only to dispatchers 

3 data shall be distributed to network appUcation and to dispatchers 

4 data shall be distributed to talkers and Usteners 

5 data shall be distributed to talkers and Usteners and to network application 

6 data shall be distributed to talkers and listeners and to dispatchers 

7 data shall be distributed to network application, to talkers and listeners and to dispatchers 
Implementation 

Optional. 

11.1.11 Group Id prefixes capability +CGIPC 



Table 11.1.11-1: +CGIPC action command syntax 



Command 


Possible Response(s) 


+CGIPC 


+CGIPC: <status> 

+CME ERROR: <err> 


+CGIPC=? 





Description 

Execution command returns the MT Group Id prefix management capability, according to 3GPP TS 43.068 [49]. 
Defined values 

<status>: integer type, value 

MT is not able to manage Group Id prefixes 

1 MT is able to manage Group Id prefixes 
Implementation 

Optional. 
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1 1 .2 Modem compatibility commands 

11.2.0 General 

This sub-clause describes how existing AT commands, designed for use with a modem, may be used to control a VGCS 
or VBS supporting MT. This is to provide backwards compatibiUty with existing communications software. 

1 1 .2.1 Request VGCS or VBS service 'D' 



Table 141a: D command syntax 



Command 


Possible Response(s) 


D*<SCi> [*<SC2> [*<SC3>] ] #<GId> 


+CME ERROR: <err> 



Description 

This Dial command extension is a service request application according to 3GPP TS 22.030 [19]. No further commands 
may foUow on the AT command line. 

Responses 

When the call has terminated, either as a result of an orderly termination or an error, the MT shall return the 
NO CARRIER final result code. 

Possible error responses include +CME ERROR : <err> when error is related to MT fvmctionality. The requested 
service, GId and priority level are checked against the subscriptions of the user and the status of the GId stored on the 
SIM. In case if no subscription is available for this service, GId or priority level or the GId is deactivated an ERROR or 
+CME ERROR result code is returned. The requested Group Id prefix is not checked against susbscription. The Group 
Id prefixes are not stored in the SIM/USIM card. If Service Code for Group Id prefix is used, but is not managed by 
MT, an ERROR or +CME ERROR result code is returned. See +CME ERROR extensions for VGCS, VBS and eMLPP in 
subclause 9.2.3. 

Detailed error report of an unsuccessful originated call can be obtained with command Extended Error Report +CEER 
(if implemented). 

NOTE 1: The dial string conforms to the syntax specified in 3GPP TS 22.030 [19]. 
Defined Values 

<SCi>: Service Code is a digit string which identifies a request to use. 

value 17 Voice Group Call Service 

value 18 Voice Broadcast Service 

<SC2> : Service Code is a digit string which identifies a request to use eMLPP priority . Service Code values for 
different priority levels are specified in 3GPP TS 22.030 [19]. 

<GId>: a digit string that specifies the group identification of a called party as specified in 3GPP TS 43.068 [49]. 

<SC3>: a digit that specifies a Group Id prefix as specified in 3GPP TS 43.068 [49]. 

NOTE 2: <SC3> is only appUcable when <SCi> defines Voice Group Call Service. 

Implementation 

Mandatory for a MT supporting AT connmands only and VGCS or VBS is implemented. 
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1 1 .2.2 Termination of an Voice Group or Voice Broadcast Call 'H' 

The V.250 'H' or 'HO' (On-hook) command may be used to terminate an ongoing voice group or voice broadcast call. 
The MT responds with OK. It is an error to issue the 'H' command when there is no outstanding network request. 

It is an error to issue the 'H' command if the user is in group receive mode or the user is not the originator of the call and 
a ERROR or +CME ERROR result code is returned to the TE. 

NOTE: This is an extension to the usage of the 'H' command that is described in ITU- 
T Recommendation V.250 [14].. 

Implementation 

Mandatory for a MT supporting AT commands only and VGCS or VBS is implemented. 

1 1 .3 SIM Commands supporting the VGCS and VBS 
1 1 .3.1 VGCS subscriptions and Old status +CGCS 



Table 142: +GGGS parameter command syntax 



Command 


Possible response(s) 


+CGCS=<GId>, <status> 


+CME ERROR: <err> 


+CGCS? 


+CGCS: <GId>, <status> 
[<CR><LF>+CGCS : <GId> , <status> 
[...]] 

+CME ERROR: <err> 


+CGCS=? 


+CGCS: (Hst of supported <GId>s) , (Ust of 
supported <status>s) 



Description 

This command works with SIM Card and when the GSM Application is selected in UICC. Function with USIM is for 
further study. The set command is used to edit the status of the GId EFvgcss on the SIM. 

The read command returns all subscribed GIds in EFyocs ^i^d their status in EFyccss from the SIM. 

The test command returns the values supported by the UE. 

Defined values 

<GId> integer type, group Id as specified in 3GPP TS 22.030 [19] 
<status>: integer type, value 

deactivated 

1 activated 
Implementation 

Mandatory for a MT supporting AT commands only and supporting VGCS. 
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1 1 .3.2 VBS subscriptions and GId status +CBCS 

Table 143: +CBCS parameter command syntax 



Command 


Possible response(s) 


+CBCS=<GId>, <status> 


+CME ERROR: <err> 


+CBCS? 


+CBCS: <GId> , <status> 
[<CR><LF>+CBCS: <GId> , <status > 
[...]] 

+CME ERROR: <err> 


+CBCS=? 


+CBCS : (list of supported <GId>s) , (list of 
supported <status>s) 



Description 

This command works with SIM Card and when the GSM Application is selected in UICC. Function with USIM is for 
further study. The set command is used to edit the status of the GId EFysss on the SIM. 

The read command returns aU subscribed GIds in EFyBS ^tnd their status in EFyBSS from the SIM. 

The test command returns the values supported by the UE. 

Defined values 

<GId> integer type, group Id as specified in 3GPP TS 22.030 [19] 
<status>: integer type, value 

deactivated 

1 activated 
Implementation 

Mandatory for a MT supporting AT commands only and supporting VBS. 



1 1 .4 Informative examples 

As supplementary services may be invoked and controlled using dial command according to 3GPP TS 22.030 [19]. 
Examples of voice group call service request usage: 



ATD*17*753#500; 
OK 

ATD*17*750*3#299; 
OK 

ATD*17**6#599; 
OK 



(originate voice group call with the priority level 3 ) 
(voice group call setup was successful) 

(originate voice group call for Group Id 299, with Group Id prefix 3 and priority level 0) 
(voice group call setup was successful) 

(originate voice group call for Group Id 599, with Group Id prefix 6 and default priority selected by the 
network) 

(voice group call setup was successful) 



1 2 Commands for USIM Application Toolkit 
12.1 General 

If a UICC connected to an MT uses USIM Application Toolkit (USAT), some USAT features can be provided by the 
MT itself, whereas other features can be implemented in the TE. This applies especially to MTs with limited 
capabilities, where the user interface could be provided by the TE. 
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If there are multiple entities inside the TE providing USAT services, for the purpose of this specification, the TE is 
visible as one entity handling AT commands and responses on the interface to the TA/MT, see figure 12.1-1. 



TE 



AT 
interface 



TA 



MT 



MT-UICC 
interface 



UlCC 



.^_+CUSATW_/ AT +CUSATA_ ^ _ 

^ unsolicited result +CUSATP ^ 

'^LtPlr'^'^TJ ^ _ 

'^L'^^lr'^'^T.^ ^ _ 



Terminal Profile 



USAT proactive command 



USAT terminal response 



USAT envelope command 



Figure 12.1-1 : Overview of the interfaces between TE, TA/IUIT and UlCC for USAT 

The AT commands for definition of the USAT profiles and transmission of USAT proactive commands, USAT terminal 
responses and USAT envelope commands between the TE and UlCC are specified in the subsequent subclauses. 

Compared to APDUs, where the MT is the initiator, USAT defines logic where the UlCC is the initiator of the USAT 
proactive commands and the MT sends responses to these commands. Due to that, USAT proactive commands are sent 
in unsolicited result codes, whereas the associated responses are transported in subsequent AT commands. 



1 2.2 Commands specific to IVITs supporting USAT 
12.2.1 Read USAT Profile -hCUSATR 

Table 12.2.1-1 : +CUSATR action command syntax 



Command 


Possible response(s) 


+CUSATR [=<prof ile storage>] 


+CUSATR: <profile storage> , <prof ile> 
[<CR><LF>+CUSATR : <profile storage> , <prof ile> 
[...]] 

+CME ERROR: <err> 


+CUSATR=? 


+ CUSATR: (list of supported <prof ile storage>s) 



Execution command +CUSATR=<prof ile_storage> returns the profile specified by <prof ile_storage>. 
Execution command issued without parameter; +CUSATR, returns all profiles. 

Test command returns values supported as a compound value. 

Defined values 

<prof ile_storage>: integer type. 

TE profile that can be set with +CUSATW. 

1 MT profile that can be set with + CUS ATW. 

2 MT default profile that reflects the inherent, default supported facilities of the MT. 
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3 UICC profile that reflects the currently active UICC profile that was sent to the UICC in the last TERMINAL 
PROFILE command. 

4 UICC EFusT- The elementary file that indicates services available in the USIM. 

5 List of MT only facihties (facihties that are not allowed to be assigned to the TE, see 3GPP TS 3 1. 1 1 1 [92]). 

<prof ile>: string type in hexadecimal character format. The profile describing the supported facilities of the 
referenced <prof ile_storage> as specified for the Terminal Profile in 3GPP TS 31. Ill [92] or for the 
related EF in 3GPP TS 31.102 [59]. 

Implementation 



Optional. 

1 2.2.2 Write USAT Profile +CUSATW 

Table 12.2.2-1: +CUSATW action command syntax 



Command 


Possible response(s) 


+CUSATW [ = <prof ile storage> [ , <pr 
ofile>] ] 


+CUSATW: <profile storage> , <conf lict jirof ile> 

+CME ERROR: <err> 


+CUSATW=? 


+CUSATW: (hstof supported <prof ile_storage>s) 



Description 

Execution command without parameters resets stored TE and MT profiles to their default values. Adding parameter 
<prof ile_storage> to the AT command resets only the referred storage to its default value. Execution command 
issued with accompanied parameter <prof ile>, stores the given <prof ile> to non-volatile memory in the MT. 

Upon an attempt to store or reset a profile that conflicts with an already stored profile or the list of MT only facilities, 
the operation fails and the profile referred to by command parameter <prof ile_storage> remains unchanged. The 
MT responds with +CUSATW : <prof ile_storage> , <conf lict_prof ile> where <prof ile_storage> 
refers the conflicting profile followed by the final result code +CME ERROR : 3 (Operation not allowed). The rules for 
detecting conflicts are defined in 3GPP TS 3 1 . 1 1 1 [92] . 

Successful execution of the command does not result in any information response. 
<prof ile_storage>: integer type. 

TE. Refers profile storage for the facihties supported by the TE. Default value is a blank profile with all bits 
set to zero. 

1 MT. Refers profile storage for the facilities to be supported by MT, which can be a subset of the default MT 
facihties (see +CUSATW). The TE can choose to register a subset of the MT default profile, typically omitting 
facilities also supported by the TE profile. Default value is the MT default profile. 

5 Refers to a conflict between the TE profile and the list of MT only facilities. 

<prof ile>: string type in hexadecimal character format. The profile describing the supported USAT facilities of 
the referenced <prof ile_storage> as specified for the Terminal Profile in 3GPP TS 31.111 [92]. 

<conf lict_prof ile>: string type in hexadecimal character format. A bitwise AND of two profiles, showing 
the conflicts, that is, USAT facilities supported by both profiles. See description of Terminal Profile in 
3GPPTS 31.111 [92]. 

Implementation 

Optional. 
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1 2.2.3 Profile download upon start-up +CUSATD 



Table 12.2.3-1: +CUSATD parameter command syntax 



Command 


Possible response(s) 


+CUSATD= [<download> 
[ , <reporting>] ] 


+CME ERROR: <err> 


+CUSATD? 


+CUSATD: <download> , <reporting> 


+CUSATD=? 


+CUSATD: (list of supported <download>s) , (list of 
supported <reporting>s) 



Description 

This command determines if, and optionally which profile should be downloaded to the UICC automatically upon start- 
up. If, prior to a restart/start-up, the +CUSATD settings have not been altered, then the default settings determine the 
behaviour upon start-up. However, if the parameters of +CUSATD has been set to other than default and then a restart is 
performed (e.g. by +CFUN), these values determine the behaviour. This is true for one restart only after altering 
+CUSATD parameters as they are always reset to default at the end of the next UICC start-up (i.e. when the USIM 
initialisation as specified in 3GPP TS 31.102 [98] has been completed). 

The command without parameters resets the parameters to their default values. 

The command can be used if the UICC is already in active state upon +CUSATA and the UICC does not support the 
"Additional TERMINAL PROFILE after UICC activation" feature (see 3GPP TS 31.111 [92]). 

+CUSATD=<download> , 1 also enables the unsolicited result code +CUSATS : <UICC_state>. The MT uses this 
unsolicited result code to indicate that a profile download is performed (setting +CUSATD=0 , 1 or +CUSATD=1 , 1) or 
that it is ready for profile download (setting +CUSATD=2 , 1). In both cases, the MT also indicates the end of UICC 
start-up by the unsolicited result code +CUSATS : 4. If the UICC is awaiting PIN verification during start-up, this is 
also reported. 

When using +CUSATD=1, the +CUSATA=1 command has to be used to enable TE profile facility handling after restart. 
In the time between profile download and issuance of +CUSATA=1, the UICC may already attempt to issue proactive 
conunands. The MT will not send these to the TE, but rather give the UICC the response "terminal currently unable to 
process conunand" autonomously. The UICC may implement only a limited number of retries, which can potentially 
leave USAT in an unwanted state if the +CUSATA=1 command arrives late. 

NOTE: Care has to be taken when using +CUSATD=2. If no +CUSATA=2 or +CUSATA=3 is sent during start- 
up, USAT is also blocked for the MT. 

Refer subclause 9.2 for possible <err> values. 

Defined values 

<download>: integer type. Parameter decides when/if to perform a profile download to UICC and which profile to 
download. The default value is implementation specific. 

Download MT default profile automatically during next start-up. 

1 Download the combined TE and MT profile (merger of the profiles written by +CUSATW) automatically 
during next start-up. The rules for merging profiles are defined in 3GPP TS 31.111 [92]. 

2 Halt next UICC start-up when ready for profile download. Profile to download will be selected and download 
will be triggered by +CUSATA. 

<reporting>: integer type. Parameter enables unsolicited result code +CUSATS : <UICC_state> to notify the 
TE about a new state during start-up. 

Disable +CUSATS, i.e. no notification. 

1 Enable +CUSATS, i.e. notify TE. 
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<UICC_state>: integer type. Parameter reports that the UICC entered a new state during start-up or that the 
UICC ended startup and entered active state. 

1 UICC start-up halted and ready for profile download. This state is reached if +CUSATD=2 was issued before 
restart. UICC start-up will continue upon +CUSATA=2 or +CUSATA=3. 

2 Profile download completed, UICC startup continuing. 

3 UICC awaiting PIN verification. 

4 UICC active. 
Implementation 
Optional. 

1 2.2.4 Activate USAT profile +CUSATA 



Table 12.2.4-1 : +CUSATA action command syntax 



Command 


Possible response(s) 


+CUSATA [=<activation>] 


+CUSATA: <UICC_state> [, <additional_prof ile_supp 
ort>] 

+CME ERROR: <err> 






+CUSATA=? 


+CUSATA: (list of supported <activation>s) 



Description 

Execution command +CUSATA retrieves the current UICC state or downloads a profile to the UICC and/or activates 
handhng of the TE profile facilities. 

A positive result upon a +CUSATA=1 or +CUSATA=3 command (also) enables TE profile facihty handhng via 
unsolicited result codes +CUSATP : <proactive_command> and +CUSATEND. The MT uses the unsolicited result 
code +CUSATP : <proactive_coniniand> to forward to the TE proactive commands issued by the UICC. The 
unsolicited result code +CUSATEND is issued by the MT when the UICC indicates that the proactive command session 
is terminated, i.e. in response to a USAT terminal response, the UICC indicates that no other USAT proactive command 
is pending. Lastly, terminal responses to the proactive commands can now be issued with 
+CUSATT=<terminal_response> and envelope commands can be issued with 
+ CUS ATE = < e n ve 1 op e_c ommand > . 

If the action requested by the + CUS ATA command can not be performed, the information response 
+ CUSATA: <UICC_state> , [<additional_prof ile_support>] is returned with appropriate values, 
followed by the final result code +CME ERROR : 4 (Operation not supported) in case the UICC does not support 
USAT at all, or the final result code +CME ERROR : 3 (Operation not allowed) in all other cases. 

If the UICC is already in active state and the UICC does not support the "Additional TERMINAL PROFILE after UICC 
activation" feature (see 3GPP TS 31.1 1 1 [92]), the TE has the option to perform a reset of the UICC or use +CFUN to 
get back to an initial non-active UICC state. The +CUSATD command can be used to set profile handling upon the next 
restart. 

All USAT proactive commands that the MT does not process itself and all terminal responses from the TE are 
transparently forwarded by the MT. The routing mechanism for USAT commands supported by both entities is 
specified in 3GPP TS 3 1 . 1 1 1 [92] . 

Test command returns values supported as a compound value. 
Refer subclause 9.2 for possible <err> values. 
Defined values 
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<activation>: integer type. 

Return status information only, in information response: 

+CUSATA: <UICC_state> [, <additional_prof ile_support>] . 

1 Enable TE profile facility handling only, no profile download. This action can only be used if the combined 
TE and MT profile was downloaded during start-up (setting +CUSATD=1). 

2 Download MT default profile. 

3 Download the combined TE and MT profile (merger of the profiles written by +CUSATW) an enable TE 
profile facility handling. The rules for merging profiles are defined in 3GPP TS 31.111 [92] . 

<UICC_state>: integer type. 

UICC start-up in progress, before profile download. 

1 UICC start-up halted and ready for profile download. This state is reached if +CUSATD=2 was issued before 
restart. UICC start-up will continue upon +CUSATA=2 or +CUSATA=3. 

2 UICC start-up in progress, after profile download. 

3 UICC awaiting PIN verification. 

4 UICC active. 

<additional_prof ile support>: integer type. Indicates whether the UICC supports the "Additional 
TERMINAL PROFILE after UICC activation" feature (see 3GPP TS 31.111 [92]). The value may not be 
available during early phases of start-up. 

No support. 

1 Supported. 

<proactive_coTnmand>: string type in hexadecimal character format. Proactive command as defined in 
3GPP TS 3 1.1 1 1 [92], consisting of the full BER-TLV data object. 

Implementation 

Optional. 

1 2.2.5 Send USAT terminal response +CUSATT 



Table 12.2.5-1: +CUSATT action command syntax 



Command 


Possible response(s) 


+CUSATT=<terniinal response> 


+CME ERROR: <err> 


+CUSATT=? 





Description 

Execution command sends a USAT terminal response to the MT as an answer to a preceding USAT proactive command 
sent from the UICC with unsolicited result code +CUSATP : <proact ive_command> (see +CUSATA command 
description). 

Refer subclause 9.2 for possible <err> values. 
Defined values 

<terminal_response>: string type in hexadecimal character format. Terminal response to a proactive 
conmiand as defined in 3GPP TS 31.111 [92], consisting of the full BER-TLV data object. 

Implementation 
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Optional. 

1 2.2.6 Send USAT envelope command +CUSATE 



Table 12.2.6-1: +CUSATE action command syntax 



Command 


Possible response(s) 


+CUSATE=< envelope command > 


+CUSATE : <envelope_response> [ , <busy>] 
+CME ERROR: <err> 


+CUSATE=? 





Description 

Execution command allows the TE to send a USAT envelope command to the MT. If the UICC provides response data 
to the command or indicates that USAT is busy, the information response 
+CUSATE: <envelope_response> [ , <busy>] is returned. 

Refer subclause 9.2 for possible <err> values. 

Defined values 

<envelope_command>: string type in hexadecimal character format. Envelope command as defined in 
3GPP TS 31.111 [92], consisting of the full BER-TLV data object. 

<envelope_response>: string type in hexadecimal character format. Response to the envelope command as 
defined in 3GPP TS 31.111 [92], consisting of the full BER-TLV data object. Empty if the UICC does not 
provide response data. 

<busy>: integer type. 

UICC indicated normal ending of the command. 

1 UICC responded with USAT is busy, no retry by the MT. 

2 UICC responded with USAT is busy even after one or more retries by the MT. 
Implementation 

Optional. 

12.3 Informative examples 

These examples provide a sequence of interactions where USAT commands and responses are transmitted in AT 
conunands. As it would make the examples unreadable, USAT data is not given in its hexadecimal representation 
(which is found in 3GPP TS 31.111 [92]), but in abstract textual form. For readability, only a subset of USAT facilities 
typically provided in a profile is given in the examples. Resulting or triggering actions on the MT-UICC interface are 
also indicated in the examples. 

First, the TE reads the MT default profile: 

AT+CUSATR=2 

+CUSATR: 2 , <PLAY TONE, SET UP MENU, DISPLAY TEXT, EVENT MENU SELECTION, ...> 

OK 

The TE removes some USAT facilities in the MT by writing a new MT profile, which contains those facilities that are 
to be handled by the MT: 

AT+CUSATW=1 , <PLAY TONE , . . . > 
OK 

Now the TE tries to write a TE profile that conflicts with the MT profile. The MT responds with the conflict 
information and rejects the command. 
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AT+CUSATW=0,<PIiAY TONE, SET UP MENU, DISPLAY TEXT, EVENT MENU SELECTION, ...> 
+CUSATW: 1,<PLAY TONE> 
+CME ERROR: 3 

The next attempt to write a TE profile is successful and the TE activates the profiles. 

AT+CUSATW=0,<SET UP MENU, DISPLAY TEXT, EVENT MENU SELECTION, ...> 
OK 

AT+CUSATA=3 

MT -> UICC: TERMINAL PROFILE 

UICC -> ME: proactive command pending 

OK 

The UICC sends a SET UP MENU proactive command, resulting in the command being transferred to the TE and the 
latter confirming it with a terminal response; thereafter the proactive session ends. 

UICC -> MT: SET UP MENU 
+CUSATP: <SET UP MENU> 
AT+CUSATT=<OK> 

MT -> UICC: TERMINAL RESPONSE: OK 

UICC -> ME: no proactive command pending 

OK 

+CUSATEND 

A selection by the subscriber in the menu results in an ENVELOPE being sent to the MT and forwarded to the UICC. 
The UICC responds with the next proactive connmand DISPLAY TEXT. After the terminal response, the proactive 

session ends. 

AT+CUSATE=<MENU SELECTION, item=l> 

MT -> UICC: ENVELOPE (MENU SELECTION, item=l) 
UICC -> ME: proactive command pending 

OK 

UICC -> MT: DISPLAY TEXT 
+CUSATP: <DISPLAY TEXT> 
AT+CUSATT=<OK> 

MT -> UICC: TERMINAL RESPONSE: OK 

UICC -> ME: no proactive command pending 

OK 

+CUSATEND 



ETSI 



3GPP TS 27.007 version 10.5.0 Release 10 



238 



ETSI TS 127 007 VI 0.5.0 (2011-10) 



Annex A (normative): 

Summary of commands from other standards 

Summary of ITU-T Recommendation V.250 [14] commands applicable to GSM/UMTS: 



Table A.1 : V.250 commands applicable to GSM/UMTS 



Name 


v.250 
subclause 


Description 


Subclauses in the 
present document 


&C 


6.2.8 


Circuit 109 (Received line signal detector) Behaviour 


4.3 


&D 


6.2.9 


Circuit 108 (Data terminal ready) Behaviour 


4.3 


&F 


6.1.2 


Set to Factory-defined Configuration 


5.8/3 


+DR 


6.6.2 


Data Compression Reporting 


6.20 


+ DS 


6.6.1 


Data Compression 


6.20 


+GCAP 


6.1.9 


Request Complete CapabUities List 


5.8 


+GCI 


6.1.10 


Country of Installation 


5.8 


+GMI 


6.14 


Request Manufacturer Identification 


5.8/5.1 


+GMM 


6.1.5 


Request Model Identification 


5.8/5.2 


+GMR 


6.1.6 


Request Revision Identification 


5.8/5.3 


+GOI 


6.1.8 


Request Global Object Identification 


5.8 


+GSN 


6.1.7 


Request Product Serial Number Identification 


5.8/5.4 


+ ICF 


6.2.11 


DTE-DCE Character Framing 


4.3 


+ IFC 


6.2.12 


DTE-DCE Local Flow Control 


4.3 


+ ILRR 


6.2.13 


DTE-DCE Local Rate Reporting 


4.3 


+ IPR 


6.2.10 


Fixed DTE Rate 


4.3 


A 


6.3.5 


Answer 


6.19/6.6 


D 


6.3.1 


Dial 


6.1-6.4/6.6 


E 


6.2.4 


Command Echo 


4.3 


H 


6.3.6 


Hook Control 


6.19/6.5/6.6 


I 


6.1.3 


Request Identification Information 


5.8 


L 


6.3.13 


Monitor Speaker Loudness 


6.19 


M 


6.3.14 


Monitor Speaker Mode 


6.19 





6.3.7 


RelLirn lo Online Data Stale 


6.19 


P 


6.3.3 


Select Pulse Dialling 


6.19 


Q 


6.2.5 


Result Code Suppression 


4.3 


SO 


6.3.8 


Automatic Answer 


6.19 


SIO 


6.3.12 


Automatic Disconnect Delay 


6.19 


S3 


6.2.1 


Command Line Termination Character 


4.3 


S4 


6.2.2 


Response Formatting Character 


4.3 


S5 


6.2.3 


Command Line Editing Character 


4.3 


S6 


6.3.9 


Pause Before BUnd Dialling 


6.19 


S7 


6.3.10 


Connection Completion Timeout 


6.19 


S8 


6.3.11 


Comma Dial Modifier Time 


6.19 


T 


6.3.2 


Select Tone Dialhng 


6.19 


V 


6.2.6 


DCE Response Format 


4.3/ 3/4.1/4.2 


X 


6.2.7 


Result Code Selection and Call Progress Monitoring Control 


4.3 


z 


6.1.1 


Reset To Default Configiu-ation 


5.8 



The use of ITU-T Recommendation V.42 error control protocol is not specified for GSM/UMTS, but if a manufacturer 
chooses to implement it over transparent data service, +E prefixed commands of ITU-T Recommendation V.250 [14] 
shall be used. 
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ITU-T Recommendation T.31 [11] and ITU-T Recommendation T.32 [12] may be used as facsimile TA-TE protocols 

without deletions or additions to the command set. 

TIA IS-99 [15] commands referenced in the present document: 



Table A.2: TIA IS-99 commands in the present document 



Command 


IS-99 
subclause 


Description 


Subclause In 
the present 
document 


+ CBC 


5.6.5 


Battery Charge 


8.4 


+ CGMI 


5.6.10 


Request Manufacturer Identification 


5.1 


+ CGMM 


5.6.10 


Request Model Identification 


5.2 


+ CGMR 


5.6.10 


Request Revision Identification 


5.3 


+ CGSN 


5.6.10 


Request Product Serial Number Identification 


5.4 


+ CRC 


5.6.7 


Cellular Result Codes 


6.11 



TIA lS-135 [16] commands referenced in the present document: 



Table A.3: TIA IS-135 commands in the present document 



Command 


IS-135 
subclause 


Description 


Subclause in 
the present 
document 


+ CBC 


4.1.24 


Battery Charge 


8.4 


+ CRC 


4.1.29 


Cellular Result Codes 


6.11 


+CSQ 


4.1.31 


Signal Quality 


8.5 



PCCA STD-101 [17] commands referenced in the present document: 



Table A.4: PCCA STD-101 commands in the present document 



Command 


STD-101 
subclause 


Description 


Subclause in 
the present 
document 


+WS46 


5.2.4.6 


WDS-side Stack Selection 


5.9 
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Annex B (normative): 
Summary of result codes 

ITU-T Recommendation V.250 [14] result codes which can be used in GSM/UMTS and result codes defined in the 
present document: 

Table B.I : Result codes 



Verbose result code 
(V.250 command VI set) 


Numeric 
(VO set) 


Type 


Description 


+CACSP 


as verbose 


unsolicited 


refer subclause 11.1.7 


+CALV 


as verbose 


unsolicited 


refer subclause 8.16 


+CANCHEV 


as verbose 


unsolicited 


refer subclause 11.1.8 


+CAPTT 


as verbose 


unsolicited 


refer subclause 1 1 . 1 .4 


+CAULEV 


as verbose 


unsolicited 


refer subclause 11.1.5 


+CBCAP 


as verbose 


unsolicited 


refer subclause 8.59 


+CBCHG 


as verbose 


unsolicited 


refer subclause 8.61 


+CBCON 


as verbose 


unsolicited 


refer subclause 8.60 


+ CCCM 


as verbose 


unsolicited 


refer subclause 7.16 


+ CCWA 


as verbose 


unsolicited 


refer subclause 7.12 


+ CCWV 


as verbose 


unsolicited 


refer subclause 8.28 


+ CDEV 


as verbose 


unsolicited 


refer subclause 8.10 


+CDIP 


as verbose 


unsolicited 


refer subclause 7.9 


+CEPTT 


as verbose 


unsolicited 


refer subclause 11.1.10 


+CEREG 


as verbose 


unsolicited 


refer subclause 10.1.22 


+CGDEL 


as verbose 


intermediate 


refer subclause 10.1.29 


+CGEV 


as verbose 


unsolicited 


refer subclause 10.1.19 


+CGREG 


as verbose 


unsolicited 


refer subclause 10.1.20 


+ CHSR 


as verbose 


intermediate 


refer subclause 6.16 


+CIEV 


as verbose 


imsolicited 


refer subclause 8.10 


+CIREPH 


as verbose 


imsolicited 


refer subclause 8.64 


+CIREPI 


as verbose 


unsolicited 


refer subclause 8.64 


+ CKEV 


as verbose 


unsolicited 


refer subclause 8.10 


+CLAV 


as verbose 


imsolicited 


refer subclause 8.31 


+CLIP 


as verbose 


imsolicited 


refer subclause 7.6 


+CME ERROR 


as verbose 


final 


refer subclause 9.2.0 


+CMOLRE 


as verbose 


unsolicited 


refer subclause 9.3.1 


+CMOLRG 


as verbose 


unsolicited 


refer subclause 8.50 


+CMOLRN 


as verbose 


unsolicited 


refer subclause 8.50 


+CMTLR 


as verbose 


unsolicited 


refer subclause 8.57 


+ CNAP 


as verbose 


intermediate 
unsolicited 


refer subclause 7.30 


+CNEMIU 


as verbose 


unsolicited 


refer subclause 7.33 


+CNEMS1 


as verbose 


unsolicited 


refer subclause 7.33 


+COLP 


as verbose 


intermediate 


refer subclause 7.8 


+CPOSR 


as verbose 


unsolicited 


refer subclause 8.56 


+CPNSTAT 


as verbose 


unsolicited 


refer subclause 7.28 


+ CPSB 


as verbose 


unsolicited 


refer subclause 7.29 


+CR 


as verbose 


intermediate 


refer subclause 6.9 


+CREG 


as verbose 


imsolicited 


refer subclause 7.2 


+CRING 


as verbose 


unsolicited 


refer subclause 6.11 


+CSCON 


as verbose 


unsolicited 


refer subclause 10.1.30 


+CSSI 


as verbose 


intermediate 


refer subclause 7.17 
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+ CSSU 


as verbose 


unsolicited 


refer subclause 7.17 


+ CTEV 


as verbose 


unsolicited 


refer subclause 8.10 


+CTZV 


as verbose 


unsolicited 


refer subclause 8.41 


+CUSATEND 


as verbose 


unsolicited 


refer subclause 12.2.4 


+CUSATP 


as verbose 


unsolicited 


refer subclause 12.2.4 


+CUSATS 


as verbose 


unsolicited 


refer subclause 12.2.3 


+CUSD 


as verbose 


unsolicited 


refer subclause 7.15 


+CUUS1I 


as verbose 


intermediate 


refer subclause 7.26 


+CUUS1U 


as verbose 


unsolicited 


refer subclause 7.26 


+DR 


as verbose 


intermediate 


refer subclause 6.26 


+ ILRR 


aS VCIUUSC 


llllCl lllCUlalc 


fc^\c^f Ciller*! A. ^ 


BUSY 


7 


final 


UUSy Slgllal UCLCCLCU 


V-"— '±M±M 1_J >v -L 


]_ 


lllLCllllCLllaLC 


OUllllCOLlUlI llao UCCll CSLaUllSllCLl 




lllallUiadUlCl 

specific 


lllLCllllCUlaLC 


as t„uiNiNiit„i DUL iiianuiaCLurer speciiic 

(nvps nnnitir^Tial iTiTomntitioTi tr 

connection data rate) 


ERROR 


4 


final 


command not accepted 


NO ANSWER 


8 


final 


connection completion timeout 


NO CARRIER 


3 


final 


connection terminated 


NO DIALTONE 


6 


final 


no dialtone detected 


OK 





final 


acknowledges execution of a command line 


RING 


2 


unsolicited 


incoming call signal from network 


NOTE: From v6. 2.0 onwards, ATVO numeric result codes 5, 6, 7 for NO dialtone, busy and 

NO ANSWER respectively, have been replaced by numeric result codes 6, 7, 8 respectively, to 
be aligned with the values listed in ITU-T Recommendation V.250 [14] (previously V.25ter). 



NOTE: The table B.l is as an overview of the result codes, hence the complete syntax of the result codes is not 
shown. 
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Annex C (informative): 
Commands from TIA IS-101 

C.1 Introduction 

The "Voice Control Interim Standard for Asynchronous DCE", TIA IS-101, contains some commands that are useful 
when passing audio "data" (that is, data which represents audio information) between the computer and the TA. 

Some of the following subclauses describe commands from IS-101 which are central to this TA apphcation. However, 
with the exception of necessary extensions, these descriptions are not intended to replace the definitions found in 
IS-101. Other novel commands from the interim standard are not included because they are peripheral to TA operation. 

NOTE 1: IS-101 also uses ITU-T Recommendation V.250 [14] AT commands, but these are not mentioned here. 

The standard specifies the following modes: 

- command mode, where there is no transfer of audio "data" between the TA and the computer. In command 
mode, the computer is neither sending audio data to the TA nor receiving audio data from the TA. 

- transmit mode, where audio "data" is being transferred from the computer to the TA. No audio "data" is 
transferred from the TA to the computer in this state. A transition back to command mode occurs when an 
embedded command indicates "end of play" or "flush data", or an inactivity timer times out. 

- receive mode, where audio "data" is being transferred from the TA to the computer. No audio "data" is 
transferred from the computer to the TA in this state. A transition back to command mode occurs when any 
command is sent from the computer, or an inactivity timer times out. During the receive mode, the TA embeds 
result codes into the audio "data". These result codes indicate pertanent events such as "silence detected", "busy 
detected", and so on. 

Strictly, the standard specifies another mode (translation), but this is not directly of interest here. 

NOTE 2: The TA "knows" the type of an incoming call (whether it is voice, data, fax, whatever), and certain POTS 
events cannot occur. Hence some standard result codes for indication of events and discrimination of call 
type are unnecessary. 

There are three possible levels of service: 

a TA supporting level A performs the following operations and detects the following events: audio transmit, 
audio receive, DTMF detection, DTMF generation and single tone generation. The following indications are 
supported: 



Event 


Description 


Handset state 


3 


ring 


idle 


4 


DTMF received 


idle 


5 


receive buffer overrun 


receive 


6 


imsolicited fax request 


idle 


8 


phone on/off hook 


idle 


9 


presumed hangup 


receive 


10 


presumed end of message 


receive 


18 


ringback 


idle 


19 


busy 


idle 


23 


playback buffer underrun 


transmit 



ETSI 



3GPP TS 27.007 version 10.5.0 Release 10 



243 



ETSI TS 127 007 VI 0.5.0 (2011-10) 



25 fax or data request acknowledged idle 

- a TA supporting level B performs the operations and events of level A, and also supports DTMF detection while 
in the transmit state. 

- a TA supporting level C performs the operations and events of level B, and also supports double DTMF tone 
generation. 

Since DTMF detection and generation cannot be guaranteed over current digital networks, it follows that none of the 
three levels of service can be supported. 

C.2 Commands 

C.2.1 Select mode +FCLASS 

This command puts the TA into a particular mode of operation (data, fax, voice etc.). This causes the TA to process 
information in a manner suitable for that type of information (rather than for other types of information). The values and 
meanings of parameter <n> are specified in the following table. 

<n> Mode 

data 

1 fax class 1 (TIA-578-A) 

1.0 fax class 1 (ITU-T Recommendation T.31 [11]) 

2 fax (manufacturer specific) 

2.0 fax class 2 (ITU-T Recommendation T.32 [12] and TIA-592) 

3. ..7 reserved for other fax modes 

8 voice 

9 ... 1 5 reserved for other voice modes 

16. .79 reserved 

80 VoiceView (Radish) 

81.. 255 reserved 



Table C.I : +FCLASS parameter command syntax 



Command 


Return 


+FCLASS=<n> 




+FCLASS? 


<n> 


+FCLASS=? 


(list of supported <n>s) 



Voice mode is of particular interest here, and has an additional result code +VCON. Specifically, +VCON indicates that 
the TA is entering the voice command mode and there is a voice connection to at least one audio input or output. This 
presupposes that some mechanism has previously initiated a connection to that audio I/O. 

C.2.2 Buffer threshold setting +VBT 

This refers to integers <lo> and <hi> that indicate levels within the TA transmit buffer at which flow control is 
asserted and deasserted. The buffer is used for averaging out the irregular timing of data from the computer, so that the 
data becomes synchronous and may be sent to some audio device. 
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Table C.2: +VBT parameter command syntax 



Command 


Return 


+VBT=<lo>, <hi> 




+VBT? 


<lo> , <hi> 


+VBT=? 


(list of supported <lo>s) , (list of supported <hi>s) , (buffer size) 



C.2.3 Calling number ID presentation +VCID 

The command refers to an integer that allows a called party to enable or disable (<n>=0) the reporting of the ID of 
calUng parties, and specifies the method of presentation of the ID. This is basically the same as GSM/UMTS 
supplementary service CLIP (CalUng Line Identification Presentation). The presentation may be either formatted 
(<n>=l) or unformatted (<n>=2): 

- Formatted presentation: data items are reported in the form of <tag>=<value> pairs. 



<tag> 


<value> 


DATE 


MMDD (month, day) 


TIME 


HHMM (hour, minute) 


NMBR 


calling number or P or O (P = number is private, O = number is unavailable) 


NAME 


subscription listing name 


MESG 


data from other (unknown) tags 



- Unformatted presentation: the data is presented in ASCII hex as printable numbers. 

Table C.3: +VCID parameter command syntax 



Command 


Return 


+VCID=<n> 




+VCID? 


<n> 


+VCID=? 


(0-2) 



C.2. 4 Receive gain selection +VGR 

This refers to the amplification by the TA of audio samples sent from the TA to the computer. The command operates 
on an integer <n>, range 0...255. Values larger than 128 indicate a larger gain than nominal. Values less than 128 
indicate a smaller gain than nominal. The entire range of 0...255 does not have to be provided. A value of zero implies 
the use of automatic gain control by the TA. 



Table C.4: +VGR parameter command syntax 



Command 


Return 


+VGR=<n> 




+VGR? 


<n> 


+VGR=? 


(Ust of supported <n>s) 



C.2. 5 Transmit gain selection +VGT 

This refers to the amplification by the TA of audio samples sent from the computer to the TA. The command operates 
on an integer <n>, range 0...255. Values larger than 128 indicate a larger gain than nominal. Values less than 128 
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indicate a smaller gain than nominal. The entire range of 0...255 does not have to be provided. A value of zero implies 
the uses of automatic gain control by the TA. 



Table C.5: +VGT parameter command syntax 



Command 


Return 


+VGT=<n> 




+VGT? 


<n> 


+VGT=? 


{list of supported <n>s) 



C.2.6 Initialise voice parameters +VIP 

This recalls manufacturer determined settings <n> of voice parameters. The command is write only. The effect of the 
conmiand is manufacturer specific. 



Table C.6: +VIP parameter command syntax 



Command 


Return 


+VIP=<n> 




+VIP=? 


(list of supported <n>s) 



C.2.7 Inactivity tinner +VIT 

This refers to the value of the inactivity timer in the TA. It is used to monitor activity on the connection between the 
computer and the TA when the computer is in "transmit" mode and sending audio data to the TA. When the connection 
has been inactive for the time set by this command, the TA leaves "transmit" mode and reverts to command mode. An 
integer <n> different than zero implies a time of <n>/10 seconds. A value of zero disables the timer. 



Table C.7: +VIT parameter command syntax 



Command 


Return 


+VIT=<n> 




+VIT? 


<n> 


+VIT=? 


(list of supported <n>s) 



C.2.8 Line selection +VLS 

This determines the selection of sources and destinations of audio samples. An integer is used to label a particular 
combination of sources and destinations. The integer is defined in an entry in IS-101 which assumes as a model a TA, a 
local phone and a phone line. Two additional "manufacturer specific" configurations (16,17) are defined. 

- label=0: this is the idle state - the phone is not connected to the radio network and no audio paths are used. 

label=l: the phone is connected to the radio network and no audio paths involving the internal microphone or 
internal loudspeaker are selected. This allows the computer to transmit audio data over the radio transmitter by 
selecting "transmit mode": 



Table C.8: +VLS label la 





loudspeaker 


computer i/p 


transmit stage 


microphone — > 








computer o/p — > 






* 


receiver stage -> 
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This also allows the computer to receive audio data from the radio receiver by selecting "receive mode": 



Table C.9: +VLS label 1b 





loudspeaker 


computer l/p 


transmit stage 


microphone — > 








computer o/p — > 








receiver stage — > 




* 





- label=4: the phone is not connected to the radio network but there is an audio path to the internal speaker. This 
allows the computer to play sound by selecting "transmit mode". 

Table C.10: +VLS label 4 





loudspeaker 


computer l/p 


transmit stage 


microphone — > 








computer o/p — > 


* 






receiver stage — > 









label=6: the phone is not connected to the radio network but there is an audio path to the internal microphone. 
This allows the computer to record sound by selecting "receive mode". 

Table C.11:+VLS label 6 





loudspeaker 


computer i/p 


transmit stage 


microphone — > 




* 




computer o/p — > 








receiver stage -> 









label=7: the phone is connected to the radio network. The internal microphone is connected to the radio 
transmitter. The radio receiver is connected to the internal loudspeaker. This allows the computer to enable 
normal phone operation (a human holding a conversation) by selecting command mode. 

Table C.12: +VLS label 7 





loudspeaker 


computer i/p 


transmit stage 


microphone — > 






* 


computer o/p — > 








receiver stage — > 


* 







Table C.13: +VLS parameter command syntax 



Command 


Return 


+VLS=<n> 


+VCON 


+VLS? 


<n> 


+VLS=? 


complex; refer IS-101 



+VCON is returned if an audio path is estabhshed or if a connection is made to the radio network. 

Manufacturer specific extension (reserved as such by IS-101) 

label=16: the phone is connected to the radio network. There is a path to the internal microphone, which is also 
coimected to the radio transmitter. There is a path to the radio receiver, which is also coimected to the internal 
loudspeaker. This allows the computer to record the sum of transmitted and received audio by selecting "receive 
mode". 
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Table C.I 4: +VLS label 16 





loudspeaker 


computer l/p 


transmit stage 


microphone — > 




* 


* 


computer o/p — > 








receiver stage -> 


* 


* 





label=17: the phone is connected to the radio system and there is a path to the internal loudspeaker and to the 
radio transmitter. This allows the computer to simultaneously play sound and send audio over the radio by 
selecting "transmit mode". 



Table C.15: +VLS label 17 





loudspeaker 


computer i/p 


transmit stage 


microphone — > 








computer o/p — > 


* 




* 


receiver stage — > 









C.2.9 Receive data state +VRX 

This action command causes the TA to get audio data from a source determined by the +VLS command, and send it to 
the computer. Once the datastream has started, any result codes will be embedded in the data and shielded using the 
normal <DLE> methods. The receive process is terminated when the computer sends any command to the TA, or by 
time-out of the inactivity timer. The command is write only. 

Table C.I 6: +VRX action command syntax 



Command 


Return 


+VRX 


CONNECT 



C.2.10 Select compression method +VSI\/I 

This selects the voice compression method <nl>, the voice sampling rate <n2 >, the silence compression sensitivity 
<n3 >, and a parameter related to silence expansion <n4 >. There are several choices of compression method. IS-101 
does not specify methods, but here is a list of some usual compression methods: 



Name 


Communications system 


GSM/full-rate 


GSM 


GSM/half-rate 


GSM 


ADPCM/G.721 


DECT, CT2 


ADPCM/G.723 


DECT, CT2 


ADPCM/G.726 


DECT, CT2 


ADPCM/G.727 


DECT, CT2 


SIGNED PCM 


POTS 



Table C.17: +VSM parameter command syntax 



Command 


Return 


+VSM=<nl>, <n2>, <n3>, <n4> 




+VSM? 


<nl > , <n2 > , <n3 > , <n4 > 


+vsiyi=? 


complex; refer IS-101 
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NOTE: A value of <n3 >=0 implies no silence compression sensitivity. A value of <n4 >=0 implies no silence 
expansion. 

C.2.11 DTMF and tone generation +VTS 

This command allows the transmission of DTMF tones and arbitrary tones (see NOTE 1). These tones may be used (for 
example) when announcing the start of a recording period. The command is write only. In this profile of commands, 
this command does not operate in data or fax modes of operation (+FCLASS=0,l,2-7). 

NOTE 1 : D is used only for dialling. 

The string parameter of the command consists of combinations of the following separated by commas: 

1. <DTMF>. A single ASCII character in the set 0-9, #,*,A-D. This is interpreted as a single ACSII character whose 
duration is set by the +VTD command. 

NOTE 2: In GSM this operates only in voice mode. 

2. [<tonel>, <tone2>, <duration>] . This is interpreted as a dual tone of frequencies <tonel> and <tone2>, 
lasting for a time <duration> (in 10 ms multiples). 

NOTE 3: This does not operate in GSM. 

3. { <DTMF> , <durat ion> } . This is interpreted as a DTMF tone of different duration from that mandated by the 
+VTD command. 

NOTE 4: In GSM this operates only in voice mode. 



Table C.I 8: +VTS action command syntax 



Command 


Return 


+VTS=as above 




+VTS=? 


(list of supported <tonel>s) , (list of supported 
<tone2>s) , (list of supported <duration>s) 



C.2.12 Tone duration +VTD 

This refers to an integer <n> that defines the length of tones emitted as a result of the +VTS command. This does not 
affect the D command. A value different than zero causes a tone of duration <n>/10 seconds. The value zero causes a 
"manufacturer specific" value. 



Table C.I 9: +VTD parameter command syntax 



Command 


Return 


+VTD=<n> 




+VTD? 


<n> 


+VTD=? 


(list of supported <n>s) 



NOTE: In GSMAJMTS the value of tone duration is preset and cannot be altered. 
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C.2.13 Transmit data State +VTX 

This action command causes the TA to receive audio data from the computer and send it to a destination determined by 
the +VLS command. Once the audio datastream has started, commands to the TA shall be embedded in the data stream, 
and shielded using the normal <DLE> methods. The transmit process is terminated by the use of embedded conomands 
or by the time-out of an inactivity timer. It is reconmiended that the TA has a buffer to allow the TA to convert 
potentially bursty data from the computer into synchronous data for "transmission". The connmand is write only. 

Table C.20: +VTX action command syntax 



Command 


Return 


+VTX 


CONNECT 
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Annex E (informative): 

Mobile originated alternating voice/data call example 

Figure E.l illustrates the possible transitions in MO BS 61 call. Responses and result codes generated by TA are in bold 
face. In this example, data part of the call is asynchronous non-transparent 9600 bps service. 



AT+CBST=7,0,1 
OK 

AT+C0LP=1 ; +CR=1 ; +DR=1 ; +ILRR=1 
OK 

AT+CM0D=2; +FCLASS=0 
OK 



ATD12345; 



success 

+COLP: +358123^5,145 
OK 





ATD 12345 




conjtection fail 
CARRIER 
AT+CEER 

+CEER: failure cause 
OK 

other possible failure codes 
BUSY/NO ANSWER/ERROR 



RLP negotiation failure 

COLP: +35812345,145 
+CR: REL ASYNC 
b CARRIER 



success 

fcCOLP: +35812345,145 
+CB: REL ASYNC 
+DRM^0NE 
+ILRR^tS200 

coNNEcVseoo 



VOICE 



ATD (or ATA) 



remote initiated 
in-call modification 
successful 



remote 
hangup 



AT+CHUP 

(or ATH 
or drop DTR ) 



in-call modification success 
+CR: REL ASYNC 
+DR: NONE 
+ILRR: 19200 
CONNECT 9600 




ir^call modification failure 



E^OR 

T+CEER 
+CEER: failure cause 
OK 

+CR: REL ASYNC 
+DR: NONE 
+ILRR: 19200 
CONNECT 9600 



in-call modification success 
OK 



OK 



in-call modification 
ERROR 
AT+CEER 
+CEER: failure cause 
OK 



ure 



DATA 

(V.24 circuit 
109 ON) 



ATH (or drop DTR) 




remote initiated 

in-call modification 
successful 




OFF-LINE 

TA sets +CMOD=0 




remote 
hangup 



RRIER 



Figure E.1: MO BS 61 call 
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Annex F (informative): 

Mobile terminated voice followed by data call example 

Figure F.l illustrates the possible transitions in MT BS 81 call. Responses and result codes generated by TA are in bold 
face. In this example, data part of the call is asynchronous non-transparent 9600 bps service. 



OFF-LINE 



AT+CLIP=1 ; +CR=1 ; +DR=1 ; +ILRR=1 ; +CRC=1 
OK 

+CRING: VOICE/REL ASYNC 
+CLIP: +35812345,145 

AT+CM0D=3; +FCLASS=0; A 




success 
OK 



VOICE 



ATD (or ATA) 



conmbtion failure 

CARRIER 
AT+CEER 

+CEER: failure cause 
OK 

general failure 
ERROR 



in-call modification success 
+CR: REL ASYNC 
+DR: NONE 
+ILRR: 19200 
CONNECT 9600 




iri^all modification failure 
E^ROR 

T+CEER 
+CEER: failure cause 
OK 



remote initiated 
in-call modification 
successful 



remote 
fiangup 



+CR: REL ASYNC 
+DR: NONE 
+ILRR: 19200 
CONNECT 9600 



AT+CHUP 
(or ATH 
or drop DTR) 




DATA 

(V.24 circuit 
109 ON) 



ATH 

(or AT+CHUP 
or drop DTR) 



remote 
hangup 



NO CARRIER 



OFF-LINE 

TA sets +CMOD=0 




Figure F.l : iUIT BS 81 call 
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Annex G (informative): 
Voice call example 

Figure G.l illustrates the possible transitions in both MT and MO TS 1 1 calls. Responses and result codes generated by 
TA are in bold face. 



MT 



AT+CLIP=1; +CRC=1 
OK 

+CRING: VOICE 
+CLIP: +35812345,145 

ATA 



MO without COLP 






AT+COLP=0 L 
OK 1 

ATD12345; 


1 







general failure 
ERROR 



call setup started 
OK 



connection failure 
NO CARRIER 
AT+CEER 
+CEER: failure cause 
OK 



success 
OK 



(no Indication 
on succc ssful 
call setu )) 



▼ 

connection failure 
NO CARRIER 
AT+CEER 

+CEER: failure cause 
OK 




MO with COLP 

|at+golp=i 

OK 

ATD12345; 



(remote ring or 
other network 
generated tones) 



VOICE call active 



remote 
hangup 



AT+CHUP 

(or ATH 

or drop DTR) 



t 

NO CARRIER 



OK 



12345,145 



connection failure 
NO CARRIER 

AT+CEER 

+CEER: failure cause 
OK 

remote busy 
BUSY 

general failure 
ERROR 



Figure G.l : TS 11 calls 
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Annex H (informative): 
Change History 



TSG 


TDoc 


CR 


R 

F 


PH 


CAT 


SUBJECT 
























T#4 


TP- 

99118 


New 1 






Creation of 3GPP 27.007 v3.0.0 out of GSM 07.07 v7.2.0 




3.0.0 


T#4 


TP- 
99124 


001 


R99 


A 


Additional result codes for +CLIP +CCWA 


TEI 


3.1.0 


T#4 


TP- 
99124 


002 


R99 


B 


ECSD additions 


EDGE 


3.1.0 


T#4 


TP- 
99124 


003 


R99 


B 


ECSD asymmetry (new command +CHSA) 


EDGE 


3.1.0 


T#4 


TP- 
99146 


004 




R99 


A 


Syntax error in +CHSN command 


TEI 


3.1.0 


T#4 


TP- 
99146 


005 




R99 


A 


Moving AT commands to 07.07 for 07.60 handover to SMG3 / 3GPP 
TSGCNWG3 


GPRS 


3.1.0 


T#5 


TP- 
99177 


006 




R99 


D 


ECSD AT command correction 


EDGE 


3.2.0 


T#5 


TP- 
99177 


007 




R99 


B 


Alarm functionality 


TEI 


3.2.0 


T#5 


TP- 

99177 


008 




R99 


B 


Phonebook storage 


TEI 


3.2.0 


T#5 


TP- 
99177 


009 




R99 


B 


Time Zone 


TEI 


3.2.0 


T#5 


TP- 
99177 


010 




R99 


B 


Additional result code for +CSSN 


TEI 


3.2.0 


T#5 


TP- 

99177 


Oil 




R99 


B 


New command for setting of Date format 


TEI 


3.2.0 


T#5 


TP- 
99177 


012 




R99 


B 


New command for Silent mode 


TEI 


3.2.0 


T#5 


TP- 
99177 


013 




R99 


B 


New command for setting of Time format 


TEI 


3.2.0 


T#5 


TP- 
99177 


014 




R99 


B 


GSM 400 Spectrum update 


GSM 400 


3.2.0 


T#5 


TP- 

99177 


015 




R99 


A 


AT command - Request GPRS service 'D' 


GPRS 


3.2.0 


T#6 


TP- 

99237 


016 




R99 


F 


Clarification to result codes for +CLIP +CCWA 


TEI 


3.3.0 


T#6 


TP- 
99237 


017 




R99 


B 


AT command for Frame Tunnelling Mode (FTM) 


Frame 

Tunnelling 

Mode 


3.3.0 


T#6 


TP- 
99237 


018 




R99 


B 


New AT command for application protocols activation 


TEI 


3.3.0 


T#6 


TP- 
99237 


022 




R99 


B 


Add new AT command (+CDIP) to inform the called line identification 


TEI 


3.3.0 


T#6 


TP- 
99237 


020 




R99 


C 
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'noti-rrPS' pnli anppTTipnts nf AT-pmniTianH "fnr nrittinatpH Inratinn 








090682 


0184 




Rel-9 


B 




TEI9 


9.1.0 


CT#45 


CP- 


















090682 


0185 




Rel-9 


F 


Corrections to UCS2 coding of -hCUSD 


TEI9 


9.1.0 


CT#45 


CP- 










iNCW rt. 1 UvJllllllcHlUS IvJl IIIVJUIIC ICllllllldlCU HJUttlUJll ICUUCSl CUIU 








090682 


0186 


1 


Rel-9 


B 


Hisrlnsiirp 

Vil o Vlv/ o UX w 


TEI9 


9.1.0 


CT#45 


CP- 


















090655 


0188 


1 


Rel-9 


A 


Correct alignment of notes for +CEREG 


SAES 


9.1.0 


CT#45 


CP- 


















090682 


0189 




Rel-9 


B 


AHHitinn nf intpmnpHiatp rpsiilt pnHp fm* -i-f^PR^V 

/VU U 1 1.1 ^1 1 yjl. lllLVl XXXwUl XVI31XXI. V*_J\Xw IVl T^V>X XJ tT 


TEI9 


9.1.0 


CT#45 


CP- 


















090682 


0190 




Rel-9 


B 


AT-pninmariHs fnr aHministratinn nf hattprv 
iicw jt. A njiiiiiiciiiuo xui <iuiiiiiiioiJ-«.unjii i/Miuciy 


TEI9 


9.1.0 


CT#45 


CP- 












SAES- 






090674 


0192 


1 


Rel-9 


A 


Corrections to +CEMODE 


rSFB SAES 


9.1.0 


CT#46 


CP- 


















090920 


0196 




Rel-9 


A 


CntTff*Hnn nfdirprtinn nfdata fnr -i-CPOS 


TEI8 


9.2.0 


CT#46 


CP- 


















090922 


0197 


1 


Rel-9 


F 


CniTpr*tinti nf iisao"p nf iindprscnrp ^^Hpfa1llt valiips^ fnr 97 flOT 


TEI9 


9.2.0 


CT#46 


CP- 
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A 
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SAES 
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CT#47 


CP- 


















100135 


0209 
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Rel-9 


D 


Correction of minor drafting rule issues for TS 27.007 


TEI9 


9.3.0 


CT#47 


CP- 


















100102 


0207 




Rel-9 


A 


Removal of [,<pdl>[,...[,pdN]]] in +CGDCONT 


TEI 


9.3.0 


CT#47 


CP- 


















100135 


0208 




Rel-9 


F 


Clarification of parameter type for -l-CCHO and +CCHC 


TE19 


9.3.0 


CT#47 


CP- 


















100131 
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Rel-9 


A 


Incorrect indication of AT commands as parameter commands 


TE18, SAES 


9.3.0 



ETS/ 



3GPP TS 27.007 version 10.5.0 Release 10 



258 



ETSI TS 127 007 VI 0.5.0 (2011-10) 



CT#47 


CP- 




















0212 


1 


Rel-9 


B 


flQQnriatpH naramptprs 


TEI9 


9.3.0 


CT#47 


CP- 


















± \J\J ±mJ^ 


0214 




Rel-9 


A 


rncoiTcct nsnic for test comm&nd version of +CGXn"RDP 


SAES 


9.3.0 


CT#47 


CP- 
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100107 


0216 




Rel-9 


A 




SAES 


9.3.0 


CT#47 


CP- 










The value range of <cid> for network initiated PDP contexts is 








100135 


0217 




Rel-9 


F 


clarified 


TEI9 


9.3.0 


CT#47 


CP- 


















100145 


0218 


1 


Rel-9 


B 


Addition of new AT-Command related to SSAC 


SSAC 


9.3.0 


CT#47 


CP- 












IMS EMER G 






100144 


0219 


1 


Rel-9 


F 


Correction of AT command for emergency bearer services 


PRS_EPS 


9.3.0 


CT#47 








Rel-9 




PHitnrial plpaniin hv A/Tf^f^ 




9.3.0 


CT#48 


CP- 










f^niTpftinn nfiinQnlipitp/l rpsiilt phHpq fnr napVpt Hnmain pvpnt 










0221 




Rel-9 


A 


rptinrtin cr 


SAES 


9.4.0 


CT#48 


CP- 




















0223 




Rel-9 


A 


-hCGCONTRDP, aUgmnent of with -hCGTFT and +CGTFTRDP 


SAES 


9.4.0 


CT#48 


CP- 










L/CadipU-UIl Ul lldllUlUIg a iC^UCbl lU Ulat-UIlilCCl WllCil Uiliy CUilUCClCU lU 








100339 


0228 


1 


Rel-9 


A 


a single PDN 


SAES 


9.4.0 


CT#48 


CP- 


















100339 


0230 


1 


Rel-9 


A 


Support for +CGPADDR returning both IPv4 and IPv6 addresses 


SAES 


9.4.0 


CT#48 


CP- 


















100339 


0232 


1 


Rel-9 


A 


Clarification of relationship between CREG CEREG and CGREG 


SAES 


9.4.0 


CT#48 


CP- 


















100355 


0234 




Rel-9 


F 


Rptnnval nf rpmainina \ <rnfll'>r f nHNlll in +PnnPONT 


TEI9 


9.4.0 


CT#48 


CP- 


















100355 


0238 




Rel-9 


F 


Addition of missing parameter in +CNAP 


TEI9 


9.4.0 


CT#48 


CP- 


















100371 


0226 




Rel-10 


B 


Siinnnrf nf mrnnrp^iSpH TP*vfi fnimat in AX-pnmmand*; 

fcJW-L/L/vXL yji. V'^lllL/X WOOV^J- i I V IvXllldl. Ill 1 W^llllllCillVlO 


TEIIO 


10.0.0 


CT#48 


CP- 


















100369 


0224 


2 


Rel-10 


B 


Cnntrnl of P-CSCP aHdrpss Hispnvprv 

V..'\J11L1^1 \J1 1 V^vJ V^l CiVlVl 1 .J o UloV^Vwiy 


AT IMS 


10.0.0 


CT#48 


CP- 


















100369 


0225 


1 


Rel-10 


B 


+CTST3 VrC anH -i-rTRFP npw AT-rnmmanH<; for siinnnrf nf *sR VPC 


AT IMS 


10.0.0 


CT#48 


CP- 
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0233 


1 


Rel-10 


B 


Cnnlrnl of T\4 CN^ Siilisv^tpm SionallinQ Platr 

v^.'^jiiLivi nvi v>ii iJUL^o y oiv^iii kji^iicviiiii^ 1 ivi^ 


AT IMS 


10.0.0 


CT#49 


CP- 


















1 00520 


0240 


1 


Rel-10 


F 


Alignment of table headers with AT-command names 


TEIIO 


10.1.0 


CX#49 


CP- 


















100492 


0243 


2 


Rel-10 


A 


AT commands for eCall 


eData 


10.1.0 


Cx#49 


CP- 


















100485 


0248 


1 


Rel-10 


A 


Clarification of AcT parameter in CREG, CGREG and CEREG 


SAES 


10.1.0 


Cx#49 


CP- 


















100571 


0249 


4 


Rel-10 


B 


TTSAT ovpr AT 


AT TITCC 


10.1.0 


CT#49 


CP- 


















100518 


0250 




Rel-10 


F 


Clarification to -i-COPS 

^..'ICHlllV'CiLl^ll WJ I V_/ 1 fcj. 


TEIIO 


10.1.0 


CT#49 


CP- 


















100520 


0251 


1 


Rel-10 


B 


AT command for remaining PIN retries for MT passwords, +CPINR 


TEIIO 


10.1.0 


CT#49 


CP- 


















100520 


0252 


2 


Rel-10 


B 


AT rnminanH for snnnnrtinp miiltinlp rarHs insfallpH in a IVTR 

r^A. ^^.^llllllCillU. 1\_/1 O tlLyLJv^l Llll^ lllUltlL/lw wdlUi^ lll^lXlllwU- 111 d It I I j 


TEIIO 


10.1.0 


CT#49 


CP- 


















1 00520 


0253 


1 


Rel-10 


B 


AT command for Emergency Numbers +CEN 


TEIIO 


10.1.0 


CT#50 


CP- 


















100763 


0254 


2 


Rel-10 


B 


TC-RT' Introduction of group IDs with prefix 


TEIIO 


10.2.0 


CT#50 


CP- 


















100742 


0256 


1 


Rel- 1 


A 


Correction of Table 8.58-1 for +CMTLRA 


TEI9 


10.2.0 


CT#50 


CP- 


















1 00763 


0257 




Rel-10 


F 


Correction of terminology for result codes and alignment of Annex B 


TEIIO 


10.2.0 


CT#50 


CP- 


















100757 


0258 


1 


Rel-10 


B 


Examples of AT-commands for USAT 


AT UICC 


10.2.0 


CT#50 


CP- 


















100757 
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Rel-10 




A^^nltinlp pf>iTppl"if>nQ \c\ AT-pnmmanHQ fnt* TT^AT* 

iVAUlllUlt- ^-ljllV^-llljlli> WJ J- VUlllllltUlUO lUl V-J/V 1 


AT IITCC 


10.2.0 


CT#50 


CP- 










Rpmnval nf pHifnr'Q nntp nn Qpi^nritv mpphani^m fnr AT-pnmmanHQ fnr 

IVt'lllVyVCll Vyl wUlLUl d ll\_/l^ \_/ll owWUllLV lll^V'llAlllolll WJV ./^ X C'^JllllllClllU-D Iv/X 








100757 
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Rel-10 


F 


USAT 


AT UICC 


10.2.0 


CT#50 


CP- 
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100747 


0262 


2 


Rel-10 


A 


-hCGDCONT svntax 


PRS EPS 

X IX VJ 1_jX fcj 


10.2.0 


CT#50 


CP- 


















100763 


0263 
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Rel-10 


F 


-hCGEV for IP address types 


TEIIO 


10.2.0 


CT#50 


CP- 


















100763 


0265 




Rel-10 


F 


Correction of references for -hCNAP 


TEIIO 


10.2.0 


CT#50 


CP- 


















100763 


0266 




Rel-10 


F 


Correction of action versus parameter commands 


TEIIO 


10.2.0 


CT#50 


CP- 


















100763 


0267 


1 


Rel-10 




Correction of print of the IP address format 


TEIIO 


10.2.0 


CT#50 


CP- 


0268 


1 


Rel-10 




New AT-command for Network Emergency Bearer Services Support 


TEIIO 


10.2.0 
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-hCNEM 






CT#50 


CP- 


















100763 


0270 


3 


Rel-10 




AT commwd for creating connection status event 


TEIIO 


10.2.0 


CT#51 


CP- 






Rel-10 




Enhancement of -f-CPOS and -f-CPOSR for LPP, capability request and 








110197 


0271 


1 




B 


velocity request. GLONASS and SBAS 


TEIIO 


10.3.0 


CT#51 


CP- 






Rel-10 




Enhancement and alignment of -t-CLlP, -t-CCWA and -hCLCC when 








110197 


0272 






B 


CU is not available 


TEIIO 


10.3.0 


CT#51 


CP- 






Rel-10 
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0273 


1 




F 


Support of AT commands for voice 


TEIIO 


10.3.0 


CT#51 


CP- 






Rel-10 












110188 


0274 


1 




F 


Correction of USAT profile activation 


AT_UICC 


10.3.0 


CT#5 1 


CP- 






Rel-10 












110188 


0275 


1 




B 




AT Tiirr 


10.3.0 


CT#51 


CP- 






Rel-10 












110188 


0277 


1 






A^^nHifif ntinn nfflpfaiilf nrnfilpQ fitiH writp fp^nnn^p 


AT Tiirr 


10.3.0 


CT#51 


CP- 






Rel-10 












110188 


0278 


1 




F 


f^niTprtinn of TTSAX pvpnt rpsnnn^ip 


AT UICC 


10.3.0 


CT#51 


CP- 






Rel-10 




Plnrifiratinn nf rplatinnchm hptwpi»n PRFH PFRFH nnH Pm?Fn 

\_-IallllUaLlUIl Ul IClaLlUlIMlip UCIWCCII \_.lvdVj, V_-liI\liVJ oIlU v_.vJI\lJ/VJ. 

TntrnHiirtinn of TPuistTatinn foT FPS anH nnn-FPS sprvirpQ for "SM^S 
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1 




F 


only" in CREG. 


TEIIO 


10.3.0 


CT#51 


CP- 






Rel-10 












110186 


0280 


1 




B 


+CAVIMS, availability for voice calls with the IMS 


AT IMS 


10.3.0 


CT#51 


CP- 






Rel-10 




AHHitinn nf reokteratinn *;tatin; fn PRFG PHRFn PFRFG rnmrnand 








110197 


0281 






B 


for emergency attached UE 


TEIIO 


10.3.0 


CT#51 


CP- 






Rel-10 












110197 


0282 
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B 


-hCESQ, new AT-command on extended signal quaUty 


TEIIO 


10.3.0 


CT#52 


CP- 






Rel-10 












110454 


0286 






A 


-hCGDATA, correction of syntax 


TEI8 


10.4.0 


CT#52 


CP- 






Rel-10 












110461 


0287 


1 




F 


Cleanups for WI AT_UICC 


AT_UICC 


10.4.0 
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CP- 
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F 


CREG, CEREG and CGREG: clarification for "out of coverage" 
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10.4.0 
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CP- 
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Rel-10 


F 


Clarifying the indication of availabiUty for voice calls in the IMS and 
in the PS 


AT_IMS 


10.5.0 
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